Obviously, if someone is state-level actor and allows government's employees to do whatever they please, there is no other solution than political pressure.

But for other cases, it is not different than other cyber crime. Except that these AI capabilities can't live on the toaster yet. If we get state of the art model running fast on Raspberry Pi, then we have real problems.