Default use of /tmp/xx for the cache is probably unsafe

[chewi]

Predictable temporary filenames are a security risk. See the OWASP guidance. I would suggest using Python's TemporaryDirectory by default instead. Users who need to persist the cache can do so in their own safely-created location.