Because this is a security question. Ugly questions need to be asked - Understanding how actual malice interacts with your security model is the whole point.