Hi, I have rebuilded the node from a source 1.0, it is contains Backdoor.Gorsh.c. I cant find any information about this backdoor. All node has written on pure go and asm in calculation keccak.  I think that it is antivirus mistake. For testing it is possible to run node with invalid -lobby fhjdskdfhskjdf.fd  and control packets by sniffer like wireshark.

Any program have access to file system and internet, it is not problem for developer to steal your data. Hard to do it on large scale.