Sure, but so is every security researcher in the world if they want to be, and they only need to get caught shipping exfiltration logic once.