Thanks – "secure mode" is exactly what I was looking for!

I'm using DOSBox (on macOS, but I believe the issue is not specific to one operating system), and it seems that in DOSBox I can mount arbitrary paths from my file system and access them – including for destructive operations. A typical usage example might look something like: mount C /my/favourite/ …