Criminal negligence imo.

Unless it's legal for people to hack into companies if they're testing AI cybersecurity capabilities or something? Presumably not though.

agreed.

and it is necessary to make researchers individually liable for this negligence; recklessness is not protected by a corporate liability defense.