Okay, you can't screw up the whole system, but you can install a keylogger (X has got to be the most insecure windowing system out there), and you can use the system for a DDoS botnet.
Also if you use sudo or su in X, they now have root thanks to the keylogger.
Also if you use sudo or su in X, they now have root thanks to the keylogger.