But then it's trivial to sneak a backdoor past code review.