If this was something done without external devices the exploit needs to get out.
Despite the stupidity potential (see: the actual example given here where junk is randomly placed underwater 'because it can be' with very little in the way of rhyme or reason) this has even more going for it with...