Actually better yet: Why don't doctors spread the flu intentionally?

Security companies are also probably staffed by people who genuinely want to stop malware. Protecting people is probably part of their motivation to go to work.