Comment by tantalor

They could very well trick a developer into running generated code. They have the means, motive, and opportunity.