Something like that just screams "eventual compromise and massive tears" though. Especially since most click to deploy solutions go on to pull from a lot of different remote servers, widening the attack surface.