[ChuckMcM]

Very true, but all it takes is the 'right' compromised server and that seems to be quite achievable with APT types.