Seems fair enough to me, so it's basically the shareware security model where any application that carries malware instantly loses its reputation, even though it is technically able to do so. Interesting to see this carried over to web apps.