Your friend doesn’t understand the risks nor the consequences of this then and they need to be enlightened about them. I don’t take “my friend told me to just do it” as an appropriate response to an advisory against doing this which involves very serious repercussions for failure. Not only for the person intending to use this, but for everyone else who attempts to do this.
Arbitrary modification of developer products from an external service is an inherent risk. We haven’t even yet asked the question if this is allowed and I strongly doubt it is.