Using visiting clients for attacking makes the site malicious, and it's because the owner decided it should be, not because it was hacked or got served "spicy" ads or something.
Since this jarhead has no qualm in weaponizing his site, dragging every visitor into this, and threatening the owner of a small blog with creating a whole category of AI porn just for a blog post from 2 years ago: what if he decides he could use visiting clients for other uses, like crypto mining? If my wiki had 700k links pointing there, i'd think hard about my choices, and would want to reduce my dependency on such a source.