I imagine this a multi front attack with the college adding a bit of code to the kernel and maybe something added to python, gtk, or a blob like with nvidia that is unauditable could carry some code that will interact with the bad kernel patch. This could when combined create a new code that might have the ability to root the system at level zero with nothing that will see it since it's all signed. You say something bad about google and it goes off like a bomb or tunnels past firewall using something that is subtle so it looks like your system is looking for an update. In reality it might be uploading at the same time "MS tactic" all your passwords, all your actions, or signals a rogue server to fake updates. Maybe it would download anything like kiddy porn onto your system with backdated files so it looks like you are the sick bastard that you are not but you cannot fight it. This is why I hate the political bullshit going on in Linux. To many people would just do this stuff out of a rationalized reason as they hate the world so I'll fuck them over first to save the world