They already have, most AV software nowadays is adware. If you are lucky they'll just slurp your data and maybe get you to install Chrome or some other random piece of software but some are even using your PC to mine cryptocurrency nowadays.
But wouldn't those infections be detected eventually? They would need to update/hide their "solution" every time A/V software comes with updates to detect them. It would be too late already.
