I don't know why you're implying the list is unbounded but this isn't very difficult. You don't have to have perfect foresight and one shot the list. You'll add things as you discover you missed them or as you adopt new tools/scripts.
Don't let the perfect be the enemy of the good, there is a lot of space between running agents directly on your system and an environment too locked down or sophisticated to realistically maintain.
Of course there are many ways but LLM don't use them. They use standard commands and you will get a confirmation prompt in the terminal where you can deny and you are thrown back into prompting.
Speaking of Slashdot, some fairly frequent poster had a signature back around 2001/2002 had a signature that was something like
mv /bin/laden /dev/null
and then someone explained how that was broken: even if that succeeds, what you've done is to replace the device file /dev/null with the regular file that was previously at /bin/laden, and then whenever other things redirect their output to /dev/null they'll be overwriting this random file than having output be discarded immediately, which is moderately bad.
Your version will just fail (even assuming root) because mv won't let you replace a file with a directory.
