At what point exactly are those companies going to be held accountable and punished for their irresponsible behaviour and overall disregard and negligence for security and ethics practices?

If a researcher causes harm by accidentally unleashing a virus, it's his/his company's fuckup, but if a researcher causes harm by accidentally unleashing a virus by proxy of a LLM running commands, it's because AIs are too powerful? If I run over someone in a speeding car accident, can I too blame it on cars being "too fast and powerful"?