> auto-patching even systems they don't own

It's been done before, though I cannot recall specific examples. Maybe as far back as the Morris worm?