Malleability is a feature not a bug.
For example, it could be used to answer the criticism about "Lazy Masternodes".
If the test for masternodes were based on the ability to malleate a transaction then it would have to be running the full stack rather than just responding to IPNG or more simple...