You should read the Italian news coverage. Marco Marsala points out that the problem is fake, that (as several people also noted on Hacker News) the command mentioned has been benign since 2006, and that Ansible doesn't permit this anyway. He observes that "serious administrators" would know this, but apparently there were no such people at ServerFault answering his question because otherwise they'd have spotted such a blatant error ("altrimenti saprebbero che quanto ho descritto non può accadere").