More like, they don't care about it, and accidentally forgot to update a table entry.

This is why Linux lies and says it's Windows to ACPI. I strongly doubt that it's malicious, they just don't care enough to test it and keep it up to date with Linux, so stuff breaks.

Sure. So it'd be like finding this in a Windows Vista system call...

if (appName.equals("firefox")) { sleep(60); addSomeBugs(); }

MS has a history of doing this sort of stuff. For example, they deliberately fed Opera browsers broken CSS files: http://people.opera.com/howcome/2003/2/msn/

Therefore, MSN looks for "Opera" in the User-Agent string and purposely sends Opera7 a style sheet which distort pages.

They caused quite a stir when they broke kerberos too.