Thread:Extension talk:Widgets/potential security issue questions/reply (3)

There is no way around it until Widgets are rewritten using new Smarty which does not require the files on the drive to be created.