This is in fact a bit paranoid as the entire module is unpacked to an empty temporary directory so we should never be overwriting any files unless the tar contains duplicate entries, in which case I just make sure the last one wins.