I'm an author of the Pilot paper (and also a participant in the much earlier capability-oriented CAL TSS for the Control Data 6400: https://www.mcjones.org/CalTSS/). Pilot was a long time ago, but as I recall its capabilities were just Mesa records with some "option" bits plus a unique identifier for the file. So a malicious program could easily fabricate one.