Taking the World Wired Labs website at face value from an administrative standpoint, what distinguishes it as a malicious program as opposed to other programs?

Taking the World Wired Labs website at face value from an administrative standpoint, what distinguishes it as a malicious program as opposed to other programs? Like DameWare by SolarWinds? The marketing makes NetWire sound like a combination of PDQ Deploy, McAfee EPolicy Orchestrator and TeamViewer. Has anyone ever purchased NetWire for legitimate remote management purposes? Conversely, has SolarWinds or TeamViewer or VNC ever had to answer for someone abusing their products? What's the difference between using NetWire or, say, creating a VBA document that silently downloads and installs DameWare, adds a user, then phones home the credentials? I guess the question boils down to, "where is the line in the sand?"