Yes. They can, however it seems that no your wont get into trouble. They currently can't. Origami only verifies the integrity of your files and does not report your 'differences' back to EA. Moreover, server owners can probably have PB verify the hash of the PAR file, but since it sometimes varies ...