What would stop someone from setting up a server that listens for connections? Kind of like a reverse VNC (or, by extension, reverse ssh tunneling). It may not be a feature of the program yet, but that doesn't mean it isn't possible. I could compile and distribute my own binary that automatically connects to me.example.com:1234, make sure that server is accessible from the internet, tell the user to bypass non-signed executable restrictions, and we're good to go.