I understand that other users could easily get around the default paths set in a global config file, and accept that risk. My bigger concern is users unintentionally placing modules in locations not covered by @INC rather than users that are intentionally being devious. As I said, only a few users will have the necessary permissions to install modules in a global location anyways.