I think there is a much higher risk of it hurting the people are using it directly, especially once bad people realize how vulnerable they are.

Not to mention a bad person who takes control of a network of OpenClaw instances via their insecurities can do the other bad things you are describing at a much greater scale.