The moment an applications actually writes information into anything else than the profile it is normally bad programming because a "normal" user does not have permissions there on either a folder on C or any folder in program files.
One thing to keep in mind if you do deliver the folder using Appstacks. Permissions on folder are pertained if set during packaging so you can change specific permissions on folders in appstacks.