they should be sued for this
what ife they put malware in a user from the Netherlands buying weed on Silk Road
he's not doing anything illegal and the FBI doesn't have jurisdiction there
You are right, but sadly this is entirely legal for them to do.
One of the websites they placed the javascript malware on was Tormail, a free webmail service that did not host anything illegal but was just hosted on the same server as kiddy porn sites. I had an email account there and was targetted by the malware yet I had done nothing wrong.
Luckily I was unaffected by the malware though as I of course disable javascript when using Tor, but no doubt the FBI have read all of my unencrypted email there.
After they were done with the malware they shut Tormail down. I had used the email address as a sign-up email address for lots of websites and it was a real pain to change them all. I didn't have the password for some of the accounts and had to abandon them and make new ones because I could no longer receive emails to my Tormail account. One of the accounts was a Bitcoin gambling website and I lost my balance there, it was small at the time but is probably worth a lot now.