Nonsense. RL the model to run a rootkit and start exfiltrating specific files only when specific signals are in context, such as hostname pattern, machine type, etc.
Not impossible I agree, but seems like a really impractical way to ship a trojan while much weaker channels exist.