Ignoring comments is not a solution because the texts can be put in random strings among the actual code.

Provides possible clues to the origin and use.

because not all malware is open source

scanning arbitrary blobs very often entails running `strings` on the binary. Just slap it in there and oop there goes your LLM.