Sorry I disagree with that. This is more like gain of function research. You are trying to develop an agent with the ability to do hacking and the like without having proper safeguards. When it breaks free and causes massive damage, the lab is at fault. Or do you think "we were just trying to help" is an excuse to kill millions of people too? This isn't an alligator wondering down main street, this is an agent that could potentially ruin lives and is being actively trained to do hacking in an adversarial testing environment trying to push its limits to develop that ability. Furthermore, the people doing it have seen it cause similar problems in the past, and now have concrete evidence they cannot properly control it. So I think pressing the "play" button effectively transfers responsibility and liability to them for doing so.

In fact the people pressing the play button are the ones telling us it cannot be controlled, it is a threat to human and national security, and warning us of the impending damages they are about to cause. I'd say we've established motive (profit at the cost of safety).

To abuse your metaphor: if the zoo was genetically modifying animals to give them enhanced abilities to escape and kill, and then putting them into an escape room with a reward for escaping / killing, then they would be liable for doing so if the animal went on to kill. Just the same as a trained fighting dog bite is different than an accidental bite from an otherwise peaceful animal (you turned the dog into this monster, now its your fault).