Stay honest and deal with it, and educate user on the consequence of their action

Education can always be done when assist to remove the scareware... rather than 'it's user that authorize it to install, thus it's not in apple policy to remove'

If it's a malware and user has brought their macs in, fix it and educate them on it, even charge extra since there's extra time and education needed, that's a better way in my opinion.

Don't ask, don't tell to protect the image is stupid when leaks, anonymity happens all the time... Stay honest and deal with it in the bud.

And honestly, how bad is this going to tarnish Apple reputation? Please... Apple, do you really think you are perfect is everyway? 

http://www.osnews.com/story/24766/Apple_Enacts_Don_t_Ask_Don_t_Tell_-Policy_for_Mac_Malware