> But so you're saying it's possible?

People with access to hardware can probably do anything if they really want to. People at the bank can remove all your money in the account by going directly into the database as well.