Also, if I were an Aussie and I'd gotten a request like this, I'd feel pretty incentivized to make the backdoor as blatant and suspicious-looking as possible. The government ordered you to do it; it did not order you to do a good job.

So "evil PR" would probably be the easiest thing to catch, and it definitely seems like other compromise vectors are where the real danger is.