How can there be a backdoor in a smart contract? Aren't they necessarily readable in full (even if the behavior is obscure)?

If I understand correctly, there can't be any actual secrets; you have to read carefully, then caveat emptor.