“a spike in CPU usage might indicate a compromised server being used for cryptocurrency mining.”

What's abnormal about that statement is that it is now considered normal.