Yes, but they would be immune from a legal point of view, they would still have to use the same backdoored software.