From a very practical standpoint - obfuscation and complexity also makes it more likely that the code will be broken in the future. Not broken like &quot;discovered and disclosed&quot; but broken like: &quot;it doesn&#x27;t work any more&quot;.<p>I mean - it&#x27;s not like the unit tests are going to contain check_backdoor_works() (etc).<p>So the simpler and more straight forward you can get your backdoor snuck in - the longer you can know it will remain, and keep working.