Minor note to package installation.

wiki/src/todo/better_root_access_control.mdwn

@@ -54,6 +54,9 @@ OTOH, there might be an obscure Debian package whose installation
 would reset our `iptables` rules. A malware could install such
 a package, retrieve the real user IP, and send it to an attacker.
 
+* A targeted piece of malware could do this w/o the need of installing said software
+
+
 Our plans
 =========