You&#x27;re assuming the attackers care if the backdoor is used by others. If a hash would increase the chances of it being found and you don&#x27;t care if other attackers discover it, only if the vendor does then it&#x27;s the right choice.