why do they have to hand it over to whatsapp? Why not hand it over to some cybersecurity researchers instead and then order them to hand over some virus database information to every antivirus company that operates in the US?