Every scripting/coding language that could copy files can be used for an wallet.dat stealer.
I don't think it's much of a problem, because it's the user his fault if he failed securing his system.