You're discounting the fact that CPUs (like GPUs) use more energy when they're working hard than when they're at idle.

It doesn't make financial sense to mine with 1 CPU because you spend more for the electricity than you'll get out of the coins, that won't change if you add a lot more CPUs.
A covert, virus-spread botnet would be effective for the creator because he's not paying for the electricity.