The world has not decided that spyware can't be produced. Mostly, the powers that be treat it like weapons of war.

That is, companies can make and sell it as long as they only sell it to governments and only the ones that we like.

The general public might be clear that spyware is evil, but governments use it extensively: https://en.wikipedia.org/wiki/Pegasus_Project_(investigation...

What is allowed to companies is not allowed to private citizens. If you want to systematically break copyright laws or steal data from people, do it as Joe's LLC. Joe would go to prison for copyright infringement or hacking other people, Joe's LLC can do as it please.