Its well known you can infer the safety of a specification by assessing a small subset of its features. Quod erat demonstrandum. /s
But seriously, this is how backdoors are trivially integrated.