But couldn't you just host an honest client for a while and then add a malicious line in to steal it after it gets popular?