If you think this won't be exploited somehow you don't follow programming.Yes you can restrict it, yes, you can isolate permissions, yes you can provide some mitigations, but one day yes you will cause damage by not including a simple button. #1 rule: minimize potential attack surface. Why do corporate software have such a hard time with this.

Maybe i will try to find an exploit just to make you guys look stupid.