> you will face criminal and financial penalties for damages caused
Even with where we're at right now, if people involved with the HF or Ruby Gems attacks faced legal consequences, the industry would get a lot more conservative very quickly. And unlike social media, section 230 doesn't apply, and there aren't any free speech concerns.
The HF and Ruby Gems attacks came from safety testing, where the AI providers attempted to understand what negative consequences could arise if someone subverted their safety protections. Don't you worry that legal consequences would disfavor safety testing and thus create more rather than fewer problems?