For #2, it depends what you mean by “malware”. If it’s something fraudulent, they’re breaking the law anyway. Surely if they’re not afraid of criminal charges they’re not afraid of a little copyright infringement. If you’re talking about something more like “antifeatures”, I’d argue that copyleft is better than “no derivatives” for that particular case.