I wouldn't be surprised if Apple even issues certs to malware authors — and then uses the resulting signatures to more reliably target their blacklist (which is now updated every day).