An attacker [— or your co-worker whose account is a Standard User —] could add malicious code to $HOME/.zshenv and it may be executed when the app is installed.
An attacker [— or your co-worker whose account is a Standard User —] could add malicious code to $HOME/.zshenv and it may be executed when the app is installed.