They aren't saying "analytics script = infection"

I'm not sure what point you're trying to make here.