100 harmless modules can be built by 100 developers and be easily pieced together to form something devious. Also, a program can be harmless and even useful if used for personal/internal purposes but be pure evil when locked down and distributed.