I think you hand wave away the responsibility born by the Governments who regulate, control, and subsidise the arms trade.

Of course it is the fault of the user of the weapons as well - but UK and USA (to just name a couple more egregious examples) governments quite literally give money to foreign governments in order for them to funnel it directly back into arms deals. These weapons can then be used to destroy hospitals and schools in Yemen. Our governments are financing this loss of life in order to further propel the revolving door.

I see this kind of cyber weaponry as a simple subset of the above complex.