If you allow everything and all cookies most things are possible in theory. In practice most distros are secure enough and most users savvy enough to not accept everything blindly that it probably doesn't happen.