Well, not necessary.
I set up an hashcat network. You only need to share the hash (and not the wallet.dat) to the participating clients.
Of course, the admin have to be a person of confidence.
But, I am sure with enough peoples involved, it could be really profitable. So why stealing the others when it could be possible to hack several wallets ?
If peoples are interested to give a try, they only need to contact me.