@danluu If they're already manipulating the metadata, how long until they inject their slop into the code itself?