In the end it was that cPanel zero day that affected many people.
But yes, the idea behind telling you about those readme.mds was that you include them for easier cleanup. I did it via command line, but why not include it.
Thanks for your support 🙂