It wasn't just the malware, they also got tagged for root certificates and then there was a third thing I forget now. It's a pattern of abuse.

Either way, that fine is just a minor expense compared to their $300B revenue. It won't even show up on a summary report. Punishments are supposed to hurt if you want behavior to change.