I wonder why they didn't add something more nefarious that can run on developers machines while they were at it, would it have been too easy to see? It was caug

I wonder why they didn't add something more nefarious that can run on developers machines while they were at it, would it have been too easy to see? It was caught very quickly anyway.