[miniBill]

It is possible but visible, and it means burning an identity, so it's not irrelevant

[Thorrez]

Burning an identity? Instead of hacking the server that serves the binary, you have to hack the developer's machine and commit a malicious source change.

I wouldn't consider either of them to burn an identity.