You don’t think there’d be a trust issue from showing a willingness to make unauthorized changes to your servers? From breaking their public promises about security, many of which are written into contracts?

Now think carefully about the implications of doing that to steal money. It’s not like they’re hypothetically doing that to hot fix a critical security issue - it’d literally be to profit from betraying their customers’ trust!