lua doesn't let you arbitrarily access memory. does this mean that lua is malware?

No, because it's not doing that out of malice, but simply because it's outside of the scope of the language.