You don't attribute it to malice if you don't have enough information to know which one it is. It is basically a way to avoid jumping to conclusions about intent.

In the case of this administration, everything they have done has been malicious so assuming anything new will also be malicious is logical.