If a server that gets backed up with borg gets hacked, the attacker potentially could also invoke borg to delete the backups from the (remote) backup.

See also these related attic issues:

• Restrict "serve" command to "create" operation only
• Pull mode
• Subkeys

💰 there is a bounty for this