Which is what the author of the article I linked did. The backdoor wasn't hypothetical, Telegram had to patch the protocol.