Even if this was true, it should not change anyone’s behavior; a malicious exit node should be assumed when using Tor.

I.e. either always use HTTPS sites, or .onion sites. No HTTP unencrypted sites.

It would be unreasonable to assume that they aren't. It's a cheap, easy, and low-risk way to soak up lots of interesting traffic.