> rm should not have permission to break the operating system.

It doesn't. You must su to root to "achieve" that.