Step 1: find zero day vulnerability in obscure archive format
Step 2: add said archive format to the most popular 3rd party macOS software update framework
Step 3: ???

Add support for extracting Apple Archives (.aar files) by zorgiepoo · Pull Request #2586 · sparkle-project/Sparkle