You don’t have to remotely compromise the service within the cluster. A supply-chain attack will do as well.