We only allow globs, not magic matches, and we drop the glob priority to a very low level (weight=5) which means that its hard for app-installed mimetypes to override the system installed ones. That should make exporting mimetypes pretty safe.