&quot;I am just dropping a key on your machine&quot; - from my point of view, it does not matter whether you&#x27;re dropping an executable, an SSH key, or Aunt Matilda: you already have the user executing arbitrary code (your distinction between &quot;here, pipe this code into bash, it will execute&quot; and &quot;here, pipe this code into bash, it will save itself to disk and <i>then</i> execute&quot; is pure handwaving).<p>(you are likewise assuming there <i>are</i> multiplexed connections, which is a great leap - these are off by default)<p>What you have demonstrated is the simplest possible botnet technique, using SSH as the transport and social engineering as the vector; for some reason, you consider it groundbreaking. Well, it would have been - in 2000.