Someone managing to slip malicious code into the Flash Player or Acrobat Reader installers is pretty much a worst-case scenario; the possibility of someone <i>working for the Chinese government</i> doing so is even worse. I don't think that's actually likely, but the idea that someone might have been trying is sobering. It's nice to see some degree of openness from Adobe about it.