They have the ability to exfiltrate private information. Even if you as an honest person wouldn't do such a thing, you might sell the IP to someone who would, or someone who would accept money to include a script that does that.