I the has access, it's not easy for him to type "rm -rf /" directly instead of modifying my file? Or he could change any other file to programatically remove every file he wants.
There may be lots of reasons to use Config module instead this, but that it's not one in my opinion.