It secretly extracts its internal Python files to a temp directory and runs them from there, which can look a bit virus-ish and can potentially leave them lying around forever if the application doesn't exit cleanly.