It's only theoretical until we discover that some state agency got it working three years ago and has been using it to quietly pwn activists since.