Are cyberweapons/cyberattacks "munitions"? if so, then isn't a machine capable of producing those munitions also itself a munition? I don't think you can put this down to "orange man bad" or "regulations", we're dealing with a genuinely groundbreaking technology with clear military applications