In the abstract, what does it mean "the attacker's marginal cost per new infection is zero"?

If you infect a machine with GPU enough to run the localLLM needed to steal another machine, you can let it burn tokens all day for free because whoever you stole the first one from will pay the electric bill.