YFII itself is a code fork with YIP 8 implemented, likely coming from its author. I personally don’t consider it malicious, and I believe it got too much heat from Metamask and Balancer. The utility of YFII remains questionable as the rewards are codified and the keys are burned, so there is nothing to govern.