Requiring "user's informed consent" would make 99% of software malware for 99% of users. The majority of what software does is magic with hidden layers and data polling in the background from various sources, but that doesn't make it malware just because the user doesn't understand.