Vars does have its problems (mainly, it concatenates duplicate variables, using the "\0" character)

But in general, using a hash really is a lot more secure than trying to do what the OP wants. Especially considering that perl uses quite a lot of special variables that could be overwritten that way (and that's assuming the code itself uses lexicals exclusively, which it probably doesn't).