they could wait until the majority of clients on the network are on devices they control, like smartphones.   If bitcoin takes off, could we see >50% of the nodes being android or similar devices being used at points of sale by consumers?    If so, could they not silently inject a bad client?  Assuming the US government can remotely inject code to your phone, which many people believe they have been able to control mobile phones for years