Is this not grounds for a major investigation? I'm not familiar with the law, but I know that there's been a number of cases of people that added RATs to their applications they created to monitor all traffic on that computer and email them passwords.

That's pretty much the exact same thing. Although: 'Never attribute to malice that which is adequately explained by stupidity.'