I contemplated for years and eventually saw someone implement a transparent kernel redirect for programs reaching for ~/.*