> They have no obligation to respect your wishes
I have no obligation to not send all scraper-looking traffic to a black hole full of zip bombs.
You do have an obligation because what you are describing is illegal, at least in the US under the CFAA.
Spreading malware to your website's visitors is wild and illegal in most jurisdictions. I certainly wouldn't confess about it online.
There's always poison fountain - deliberately wrong source code.