At least for file variables, Emacs prompts before loading untrusted values.