Comment by GrayShade

3 years ago

A compromised IO-less file system library can still synthetize malware files on a volume.

... but only on the volume it is explicitly given access to. So, if the library was IO-less (and didn't use unsafe code), you could embed it in some tool, e.g. for forensics, and not have to worry about it compromising the security of the "host" system.