You couldn't, but basically any VFX shop easily could. Point is, it doesn't make anything possible that wasn't already possible, it just makes it more accessible. That's an inevitability with technology, as time goes on. The counter is not to try and suppress it, that has never worked and never will.
It's always individuals who want to harm others in this particular way; and individuals don't throw around big-VFX-project amounts of money on petty revenge. But they'd certainly spend $20.
DDoS attacks got a lot (1000x) more commonplace once there were DDoS services that let you buy an hour of attacking someone for $20. Same idea here.
DDoS services are almost always purely malicious (you can _may be_ argue that you can use them for pen-testing or load-testing). But cars are not just purely malicious; there's a lot of useful things cars can do, and that's why the dangers of car ownership is outweighed by the benefits, as judged by society - we just have some road rules, and licenses, so that people know to use them responsibly.
Why not the same with an AI model?