Similar-ish concerns have been raised before: https://www.lightbluetouchpaper.org/2021/11/01/trojan-source...