In theory, sure. In practice, we don’t see much of that.

Don’t run the video player with administration credentials, and keep the video player up to date and it’s likely to be fine.