Permissions drush workaround.

Hi,
I doubt it is a good idea to give the web server write permissions to sites/all/modules.
This would mean, really any web app on my server can mess with the modules!
(I could do it temporarily, though..)

What about the following:

1) With the ftools web ui, you can create a feature "definition", and save it to the db. The "definition" is mostly what goes into the info file, and the destination dir and name.

2) With an ftools drush command, you can create a feature based on the given definition, and write it to the sites/all/modules or whatever destination.

This would be equivalent to:
- Overwrite the *.info file of an existing feature, or create a new one.
(- optionally, enable the just created feature?)
- drush features update [name]

Am I right?