Should find-dynamic-extension unconditionally look in .?

find-dynamic-extension in eval.scm looks like this

  (let loop ((paths
              (##sys#append
               (if ##sys#setup-mode '(".") '())
               (or rp '())
               (if inc? ##sys#include-pathnames '())
               (if ##sys#setup-mode '() '(".")))))

So no matter what I do at user level, I can't get "." off the search
path for dynamically-loaded code. Loading code from CWD is a well-known
security footgun. 

Could this inclusion of "." be suppressed somehow, or, ideally, not done
by default?