If that were not the case there would be no need for Hanlon's razor.

The fact that Hanlon's razor needs to be said at all is to warn people about attributing malice to instances where none exist.

"Never attribute to malice that which is adequately explained by stupidity."

It's not saying that instances that actions attributable to malice do not appear. It's saying it usually isn't malice.