What is your point? The program as presented isn't insecure at all - everything is set from within the program. It would pass -T without a problem.

Of course you get problems if you do what you suggested above. But then, you will get the same problem if you do

    system "/bin/rm -rf /";
[download]

But that's just stupid, not insecure.

Abigail