Selective tainting. "Taint all filehandles, but not environment accesses." Or even, "taint this filehandle, since it's coming in from the network, but not that one, since it's the server config file and I trust it". Difficult to implement in Perl 5 without a major slowdown, I think. You'd have to split taint checking from actual tainting, for starters. But worth thinking about.