Yes, the possibility is real and it does exists. Most every software and hardware is suspect.
Case in point: I will never buy routers from Dell anymore.
Suffice it to say that after trying to unsuccessfully log into my router (when I entered a wrong password), I got an undeliverable email from Dell stating that one of their employees was on vaction and won’t be in until some time later !!! (:AGY)
It is obvious that Dell not only had forwarded my unsuccesful attempts to my own email address (which I had specifically authorized during the router setup), but also had in its firmware, installed its own email address to send all of my passwords, and who knows what else.
And yes, it had the Dell domain as part of its email adddress. Now, what business does Dell have in knowing this very private (password) information?
It does not take much imagination to see that after having my IP address, along with my password to get into my router, they could do whatever they felt like. The irony of it is that they could do that without any software-based firewall, or anti-malware ever knowing about it; as it all happened before packets of data could even enter my computer for analysis.
There are a number of ways to exploit this maliciously-built vulnerability such as changing DNS in the router, and even reporting all the links that a user visits back to Dell.
The question then becomes: Who is watching the gatekeepers?
In case of Scroogle, you are just adding an additional layer of “protection” by hoping that they might not be part of Google itself !!!
I call it cheap insurance.
Teletype.
P.S. My other two questions still stand :THNK