Re: many packages write to `temporary-file-directory' insecurely

[Richard Stallman]

    We should instead define a `score-files-directory' which could default
    to "/var/games" or to "~/.emacs.d".

That seems like a reasonable approach.
Would someone like to do it?

If /var/games is treated just like /tmp, meaning anyone can create a
file in it, then it will raise the same security issues as /tmp.  We
could perhaps use the code that Al Petrovsky sent, if that is correct.

Or we could say that the files should be created by root during
installation, and that /var/games should not allow anyone but root to
create files.