Author claims this closes all (temporary) file creation vulnerabilities. Frankly, I can't tell. Mention caveat in SECURITY.