There’s still no evidence that the malicious PDFs were planted by archive.today. The source could have served malicious content to the crawler, no?
About the DDoS, were they not aimed at someone trying to dox the maintainer and pretty much ruin their life? Sounds like defending to me, not attacking. I have absolutely no problem contributing my bandwidth to their defense while visiting the site.