I am using on Mac and I have few hooks, one is replace any rm to trash command. You can make hooks for the most dangerous patterns and use dangerous-skip-permissions with a bit more safety.