Your point? So they can pretend they made it, and that's wrong, and they can refuse to release source code. Of course, in the case of the GPL, this is illegal. But this is only a sort of valid argument if you presuppose that proprietary software is bad. If that's your position, I agree with you, but I was getting the impression that you were listing this as a disadvantage of free software compared to proprietary software.
I don't use language like "wrong" and "bad" when talking about software licensing and distribution. I don't think that way. What we're talking about is a desire to not have your program modified outside your terms and misrepresented. This desire isn't exclusive to GPL proponents. It's easier to modify open source software. That it's illegal to do so without complying with the license is beside the point.
I really don't know how you've concluded that I'm making some argument that GPLed software can be released w/o source in violation of the license agreement, and that's wrong because releasing software without source is wrong. Um, no, I'm saying that GPLed software can be
changed and THEN released without source, and that a person can have a (justifiable) point of view that a third party can do more damage in being able to make source-level changes that they don't make available. That it isn't merely analogous to illicitly distributing software (not that proprietary software implies anything about distribution rights). It's not that you can illegally ignore the license any more than you can any other license, it's that you potentially have more power while doing so. You really don't understand this?
Those all can be added without the need to modify the source code. Heck, for a trojan horse, you don't need to include the original program at all. For the rest, just use a startup script that executes the malware along with the legitimate program. Not difficult at all. You could even obfuscate the script so it's not obvious to most readers what is really being done. Or you could use a compiled language instead of a scripting language for the task, maybe even build in the execution of the legitimate program to the malware.
You know full well that I was saying that having the source makes it EASIER, not that no form of malware can be made by modifying proprietary binaries. Yes, you can merge a separate binary/script/whatever that's independent of the binary being executed. Actually changing the binary to bury some nefarious functionality along with its normal functionality is more subtle and more difficult to detect.
It doesn't really help that a lot of people are fairly complicit with license violations, even those that otherwise
encourage the GPL. How many times now have I seen programs that make it clear they're GPLed, they include the copying terms and everything, but when you ask for the source they say "oh, give me a few months to clean it up." And no one really minds. Most people are happy with a smokescreen that the person is following the license because most people don't personally want the source, they just want to believe it's free (and that they can trust the person who gave them the binary).