Re: Punishment in proportion.
"... the better sentence would have been to assign a number of C.S. hours for EACH proven incidence of infection."
The 240 hours is in fact the maximum community service which can be given under Dutch law.
Note that under Dutch law infecting multiple computers would be considered a single "strafbaar feit" ("punishable event"), hence limits apply to the whole punishment. This is the principle of the "meerdaadse samenloop".