You literally posted the answer to your question. Here is an expansion of the details.

I sometimes wonder what will happen when EAC, that has root access to millions of PCs, gets compromised or has grunty employee and pushes malicious update