My admins don't like having directories in the HTML tree that are writable by the web server.
Clearly several directories need to be writable by the system in order to upload attachments, upload images, update the cache and smarty cache, etc. However, it's a security issue having these writable...