It is my understanding that getting infected by a botnet is not illegal yet, so there is room for improvement.

It could be in Germany until the law was reformed. You were civilly responsible for whatever the botnet did.