An attacker can trivial phish to sudo password and execute arbitrary commands every time you open the terminal. shellrc and profile as well as almost all core

An attacker can trivial phish to sudo password and execute arbitrary commands every time you open the terminal. shellrc and profile as well as almost all core unix tools allow running arbitrary code. You can even bend the paths of bashrc and friends so the user can't trivially inspect them without dropping to root first (at which point, arbitrary code can trivially obtain root access too)