Correct! -> All critical files should not be modifyalbe by an normal user! Users should not be able to modify the program files directory too.