The insider threat potential here is hilarious, especially since you can compute the gradient for the attack, potentially even make it plausibly deniable.