You’re not wrong for trying to find another solution. Unfortunately, I think, in this case, your up against fundamental Linux permissions. One possibility would be running the work in a container with reduced capabilities but, it really is going to depend on what behaviors you’re trying to avoid.
Overall, it’s likely a better idea to re-install because noone should be running stuff directly as root in the majority of production scenarios.