So next time something like this slips through and it runs rm -rf /* ? Then what?

Shit like this erodes trust.

I wonder how many people immediately thought about whether similar things had been snuck into xfishtank and xpenguins.