Transparency is required of all parties. You can't demand AI companies disclose something while at the same time you run to a microphone screaming "rogue AI swarm hacked our private system" without providing details following a CVE-level of disclosure. Grabbing headlines is obvious to those in the security world.