Technically they could delete the whole game from their end, but to modify the code on our computers the launcher has to update, and restarts don't even need you to close WoW. Restarts don't spawn ninja patches, ninja patches spawn ninja patches.They could always ninja something in there.
That's usually restricted to it downloading patch data, or it downloading game data because you opened the game before it finished installing. It's possible they can hide something and spring it to life later, but the tripwire would go off and the bot would stop. For normality sake, if you see a restart you're fine, if you see a shutdown you might be fine, if you see a patch from the launcher you're probably not fine, and be sure it's a patch just not it relocating files.Well considering the game can update while playing it's possible. Them restarting the server means they could have added something into the server files. But like you said they would've shut the bot down if it was unsafe.