Safety alignment feels like an absolute farce and the completely wrong approach. These things are guns, or attack dogs. We've never succeeded at reigning in software with this approach in the past, besides maybe DRM. This has the unprecedented ability to entertain the base desires of most juvenile threat actors, which is to get a big payout with minimal effort (let alone the previously sophisticated attackers, who are now basically gods). Now we have a turn-key tool that can leverage and chain the most minute vulnerabilities up the ladder to full compromise or discover zero days with unyielding dedication. It feels like it almost makes CVE level classification moot.

I agree for data loss and ransomware where the ransom is paid, ie economically driven attacks. I wouldn’t agree when the hack is designed to kill the business destructively and no economic gain is sought or intended.

The difference in attack methodology is trivial, from a threat actor perspective, imho.