I think information is likely more analogous to ammunition than to a weapon.

By itself, it is harmless, but when paired with an appropriate device, by a user with malicious intent, it can then be used to cause harm.