Hidden services are also easy to find. Any average user can see if their CPU usage is too high.
Most people I know wouldn't even notice. And if they did, they'd have no idea why.
botnet hashing isn't even worth it any more. However It would be worth it to hijack those giant ASIC farms in China.
I don't know, aren't there any alt-coins that can be worth CPU-mining these days?