Mostly theoretical though.
But I think you are right this could potentially let the device connect itself :(