Clearly Google is not evil for having malware in your spam folder. But it would be unethical to post the contents of your email account, expecting people to dow

Clearly Google is not evil for having malware in your spam folder. But it would be unethical to post the contents of your email account, expecting people to download and inspect the email in a context where they could be infected by the malware in your spam folder, without at least a warning that it contained viruses. I think the best resolution would be to post the contents of non-spam mailbox folders with a warning that some attachments may contain viruses, or scrub attachments. Post the spam folder and suspicious attachments separately, most people aren't interested in that part of the email archive. This would save bandwidth and prevent users from becoming infected. The small risk that something important in the spam folder is missed is outweighed by these benefits, IMO.