So it was back in 1988 when a young researcher let loose the first really big self replicating worm on the Internet - he ended up getting done for it - i don't want to rehash that story, but now, when a Very Big AI company lets it's s/w cyberassault another, why is there no legal conseqence? what is the difference, really?
A related story which we can lay at the same door - when, back in 2013 a young person who was interested in Open Access, downloaded and released a lot of JSTOR content, he was hounded, almost literally, to death by legal authorities. when those same Very Big AI companies download everything from everyone and use it to build for profit services, what do we hear from the legal world? not very much yet.
$$$ trump law every time, as far as I can see...