is open-source malware a moral good?