- Implement tests to ensure file paths are properly allowlisted in custom view and folder info handlers. - Verify that collections mutations enforce CSRF protection and write access guards. - Check that settings mutations require write access for specific routes.