Probably a stupid question, but could a malicious party use Dual_EC as a primitive to construct broken but fast crypto? ( I am thinking about something like see

Probably a stupid question, but could a malicious party use Dual_EC as a primitive to construct broken but fast crypto? ( I am thinking about something like seeding a fast CSRNG with a Dual_EC random number and thereby breaking the fast CSRNG.)