You would want the advertised speed to be approved by the user at the time of setup.
If it was automatically accepted, the malware would just change the advertisement.