I'll just note that "compromised" is perhaps too strong. These services often come from VPN plugins (eg Hola VPN) that lets users watch sports from different restricted geographic regions. There is a trade here that's in the TOs: you get someone else's IP address, they get yours.
That's not how Hola works. You're not sharing your IP with some other Hola user. You're sharing it with bots used for all sorts of good and bad things.
What part of that isn’t technically “compromised”? You can argue there’s no evidence of it currently being weaponized but I’d say some shitbird running a free vpn inside the White House is not a good look regardless.
Compromised describes exactly what you are talking about. Any free rider on a network that the operator is unaware of means the device is compromised.