They’re not geniuses, they won’t be able to hide malware code for long. And the moment it’s recognized they are finished as far as ever being coders on any related project in the future, so I don’t see how they could accomplish much by doing that.