Ethernaut 21. Shop

Can an external contract still do harm if it's view-only? Yes it can.