I think the general consensus is that you would need local administrative access or physical access… At that point you’re kind of already pwnd.