[nine_k]

Arbitrary account, no. An arbitrary merchant, yes.

[account42]

That typically doesn't even need root access though but only a numeric PIN. Of course rout access might let you conceal what you are doing better.