Comment by JonnieCache

Note that they are injecting code into the running Finder process, which is very different from patching the Finder binary. That would be very bad.