What we could do, as a mitigation, is to enable collision checks unless there’s at least one ‘-D’ flag. We’d also need to introduce ‘--allow-collisions’ for ‘guix shell’.