Valid concern. Maybe this can be addressed with a patch...

Seems solvable by perhaps storing paths that don't exist yet on the filesystem in landlock's red black tree.

Workaround might be creating .ssh ahead of time