Why would they need to update browser.js to do something shady, they can just drop in a brand new binary that does whatever they want it to do and the vast majo

Why would they need to update browser.js to do something shady, they can just drop in a brand new binary that does whatever they want it to do and the vast majority of users would be none the wiser.