What are the chances major projects we use today aren't backdoored similarly? It's so easy to do and so hard to detect.