As to why they implemented the killswitch, a simple guess will be a slip up or poor personal security leading to your lair being raided by some unforgiving 3 le

As to why they implemented the killswitch, a simple guess will be a slip up or poor personal security leading to your lair being raided by some unforgiving 3 letter agency that doesn't mind meting out a few harsh knocks until you cease the spread. However I agree with you on the poor implementation of the killswitch. The first thing that came to mind was, why not use an .onion instead? It might mean bundling the malware with TOR but I've seen enough of these use cases to know it's not a challenging thing to implement. Better to have the entire computing might of the world struggle to crack your private key instead of some lucky researcher registering your domain and halting your spread.