Right because everyone knows that rootkits and other malware are just a hypothetical issue - no one ever deploys them against unsuspecting victims because that would be against the law.
Illegal actions - especially by the government - must be punished. Otherwise our laws are just a polite suggestion. I agree that it's problematic to conflate Right-to-repair with technical issues that are supposed to be solved by the legal system.