Many "activators" for Linux distros come with curl | bash commands. When you run these, you grant root access to a stranger's server. They could: