Meh. You sound like one of those "the code's not elegant enough to ship yet" types. It's malware. If it achieves the goals intended, ship it. Get what you can while you can. It's not state level infiltration built for years of spying without being noticed. It's the level of script kiddies trying to get some street cred, maybe some scratch to spend, or whatever else for the lulz.

The old addage "know your audience" seems apropos here.