He can fool it once, but can he fool it twice? Can he recompile?
But it is easy to fool compilers to do what he wanted