[ronsor]

Their statement implies they're preinstalling viruses on shared server clients' sites.

[hedora]

The could also be incompetent, or competent enough to maintain plausible deniability while guaranteeing viruses will eventually land.

(I’m taking the original claim at face value for the sake of argument.)