AFAIK Plasma global themes could execute arbitrary code.[1]
KDE global themes have malicious code - Fedora Discussion ↩︎