Putting backdoor into something that works with binary input almost nobody understands and at the same time is runtime linked with a huge amount of binaries, seems quite a good idea. The ”runtime patching“ of sshd could have only been the tip of an iceberg.