Yes, but users choose to visit sites like they choose to visit a park. They would know the risks before going.

The lawlessness described here isn't harm on a third party against their consent. It's fully known by both parties at the time of the voluntary transaction.