>>11593357 /pb

And there's also the issue of compilers injecting binary code when it detects some patterns in the code. Thus the backdoor is in the compiler, not the software itself.