I believe that in order to maintain the separation of functionality during installation, only the Extention installer should have the ability to install extension hooks through ...

This is an easily followed procedure that makes it difficult for the location of your system folder to be known. In the same way that we've renamed the system folder (or moved it above webroot ...