Literally any pre-compiled binary could do nefarious things... why make a big deal out of this one?
Second because you can usually contained a closed source binary, let's say 'zoom' for example, but here the root goal is to open a pipe to the internet and give access to the console or local network, so it will be hard to check what it does and constrain it in normal operations.