And in fact this has happened in the past: http://www.us-cert.gov/cas/techalerts/TA07-192A.html http://www.us-cert.gov/cas/techalerts/TA07-192A.html Seems like

And in fact this has happened in the past: http://www.us-cert.gov/cas/techalerts/TA07-192A.html http://www.us-cert.gov/cas/techalerts/TA07-192A.html Seems like a good reason not to ship it with the OS.