Question I got afterwards was: Apart from disabling telnet, what kind of long-term modifications are made to the system?

I don't mind a nice vigilante "malware" that disables out-of-date daemons, but I mind if suddenly it added an opening for something else.