The malware might not always change your address to prevent being easily detected like this. It's really difficult to tell how the malware works when the malware itself is hiding perfectly on your system. If you want to argue with Binance over this then you're going to have a tough battle.

Binance and probably most people would not accept your "if there is no copy button then this won't happen" argument because they'll reply with "you should not get a virus in the first place and you should always double-check". What matters right now is securing your new system.