

Why would it matter the reason of dropping a file of X size? The point is that not all applications are “decent” and some will undoubtedly use /tmp because “it might be the most logical thing” for any developer that’s not really up to date.
I don’t see how reviewing the tmpfs helps in this scenario if at all… we are talking about end-users your common joe/dane running your day to day applications, whatever they may be. I don’t and will never expect developers to adhere to anything and just put out whatever.
I humbly disagree. We don’t live in that utopia.
I guess for an scenario to be real everyone has to know exactly what’s happening? They will know what caused it and they will all know how to properly report it even though I don’t even expect a lot of people to know their system especially your average joe/dane nor do I expect them to even troubleshoot the issue if something were to happen. It doesn’t really invalidate the scenario at all.
A fabricated scenario is itself pretty redundant. :)