You've left out "use an existing Android botnet to siphon off private keys in a way that's far less likely to attract law enforcement attention".