They'll still install crowdstrike or some other rootkit that will bring it all down anyway