Rob is being understandably cautious (in your favour) to ensure that you don't loose the contents of your disks, say

Hijack the unlink system call and refuse to unlink anything that isn't the database, unless (mumble, say, something echoed into a file in /proc)

Of course it wouldn't help if the problem were instead writing garbage into the files.

Finally, I regard your post here as "Rude", too, matey.

I know this wasn't in reply to me, but if I get rude, please smack me down. I'm serious.