No, it this case the backdoor. Hide it in plain sight.

Neither does the blob it downloaded. Would you think twice about AVX10 support if it was commented as AVX10 support in a compression library? Some might, but would they be the ones reviewing the code? A lot of programs that can take advantage of “handwritten” optimizations, like video decoders/encoders and compression, have assembly pathways so it will take advantage of the hardware when it is available but run when it isn’t. If the reviewers are not familiar with assembly enough something could be snuck in.

systemD is using dlopens for libraries now and I am not convinced malware couldn’t modify the core executable memory and stay resident even after the dl is unloaded. Difficult, yes, but not impossible.

Seriously. If you are going to do it, write in assembly or something else no one understands.

There is also use a password manager and reset the password everytime because the site blocks them and locks it out.

That is sad, but I guess the fact that is is for 1 year the positive.