My point is that the distinction already doesn't exist. This is because it really doesn't need to exist for most cases - no one worth talking to is on the "actu

My point is that the distinction already doesn't exist. This is because it really doesn't need to exist for most cases - no one worth talking to is on the "actually malware should be legal and providers should be forced to host it" side of the argument. Where things get murky is the "Potentially Unwanted Program" ie: programs that really really suck, are kinda sketchy, but don't cross over into malware territory. That's to say that there are grey areas, but there are also black and white areas, or areas that are so far on the fringes of grey that it's fine to just treat them as black or white. We do that all the time. In the case of Kiwifarms we have what I think is a very straightforward case. A website that exists for the sole purpose of organizing malicious acts falls well into the "maybe it's not illegal, but it's blatantly unethical".