I find it pretty hard to make sense of an argument that frames the removal of trivially exploitable, extremely privacy-violating malware from users' systems as a 'wrong'. The software itself continues to work and was minimally affected, if at all. If quickly intervening to protect your customers' privacy from an egregious threat is wrong, I want all my vendors to be wrong.