That makes a lot of sense to me, too. Also: this isn't to say that there aren't grave concerns with using self-propagating malware as a vector for attacks. It's just to keep things in perspective.

The chances of a full-blown Iranian nuclear weapons program not eventually bearing an attack by explosive munitions are pretty close to zero; see Osirak. If malware that only really impacts centrifuges forestalls that for a couple years, I see it as a good thing.