It's possible and easy (have types for path coming from untrusted source), but it's a matter of a standard library rather than a language.