I think there does need to be some notification from the US Justice Dept to AI companies to the effect of, "If your robot hacks into other organizations, you will be held liable for its actions." That will "slow down" things as much as they need to be slowed.