If we avoided tags to imply the hability to run inner commands we would stop some plugins and home-made aliases to work, so I don't see any other solution than warning when system files or executables are going to be runned.
Optionally: "Don't warn me again for this file"
/ –
