Of those with interest, if any of them are programmers or have the slightest curiosity about what all those files are for, they're abundantly competent to pull off this hack. Not necessarily the automation, but they can make it happen.

but now the developer is going to have to rewrite their system to mitigate this

This hack was literally waiting there for anyone who cared to look. Please don't tell me you've forgotten this: http://img820.imageshack.us/img820/1641/itsfinetrustme.png