I don't think the definition of "bad" is expanding. Rather the ability to detect and exploit "bad" is.