@nprofile1q... It's difficult for that to survive future updates, which might change in ways it wasn't programmed to override. It's also difficult for that to have no side effects, beyond it's specific targets, so people would notice. (One time someone noticed a slowdown, and it led to discovering the exploit.)
People use that argument mostly to get you to use closed source software, or to trust binary plugins and packages, ignoring that this gives many more opportunities to do this with every update