This is an attack vector which has been exploited in the past to great effect[1].

[1] https://arstechnica.com/information-technology/2021/02/suppl...