Many hacks, including "../" attacks, can be prevented by restricting permissions on the server.

What do you think is the principle of least privilege?

Systems operating with the least amount of privilege necessarySystems running only one type of privilege at a time

Correct! Just like a need-to-know basis, this principle limits system privileges to create a defense against hacks.

Wouldn't that really limit the speed of a system?