The risk vs. reward component also needs to be managed in order to deter criminal behavior. This starts with regulation.
For the record, I believe regulation of AI/ML is ridiculous. This is nothing more than a power grab.