Silly question. But couldn't CI say in TOS, that any crypto currency mined using their CI/CD resources belongs to the host?
* Cryptocurrency can't really be confiscated
* These malicious miners likely live in a country with a dubiously competent legal system.
* Lastly, it's not worth the money to try to collect.