I gave an example of why they are not.

Could you explain what your legal strategy would be to overcome the intent requirement of the CFAA? If openAI didn’t intend to hack anything and agents can’t intend to do anything at all, and the CFAA doesn’t permit negligence to stand in for intent, seems to me like the existing law does not cover the situation everyone keeps saying it does.

Requiring intent is very specific to your jurisdiction, many, if not most other jurisdictions do not require intent.

In the UK, any form of unauthorised access may be prosecuted.