Temporary files can be created by user programs. On my machines, I made /tmp an in memory file system and also disallow execution or setuid/gid in this directory as much malware tries to abuse it in this manner.