The answer is “Yes”.
I posted a link to an article about this yesterday. As I understand it the attacker would need physical access to the device to change the logo, so the danger is pretty low, though not negligible.
There are also at least two other threads about this. A moderator probably needs to look at merging them before we have every other thread about this.