The point is LLMs are not effective at “hacking” in any “obtaining unauthorized access to computer systems” sense.

They can regurgitate information about “hacking”, same as a library, but pointing an LLM at a server will achieve worse results than many existing specialized tools for vulnerability scanning and exploitation.

So as I said, the risks are overblown due to a misunderstanding.