Hypothetical is beside the point. The hardware is there, the software is closed and you can't verify what is really happening, so the potential threat exists.