I wouldn't rule it out happening. However, I think the bigger risk (not necessarily more likely to happen, but the gain would be much bigger) would be someone g

I wouldn't rule it out happening. However, I think the bigger risk (not necessarily more likely to happen, but the gain would be much bigger) would be someone getting a piece of malware built into the actual distro.