[tokenizerrr]

The main problem for legitimate operations is that the user will spend far more on electricity than what the site operator will earn, especially with implementations running in the browser which still aren't yet able to be as performant as you would like. With that in mind a direct exchange of currency for features/access makes a lot more sense unless you want to trick your users. Most won't realize why their power bill is so high.

There are malwares that mine crypto currencies, usually while the machine is idle as to not alert the user that something is up with their machine. However these profits are also quite low since you're using mostly low end machines.

Crypto lockers are of course way more evil, but they function just as well on low quality hardware so I can understand why malware authors do it.