4 ms·

They would have to be a 'trusted' malicious party. But in theory, yes. I'm sure it would be reverted very quickly though.