Depends if an AI DoSed an important service or not.

There used to be a lot of invisible gatekeepers in a pre-AI world. At work, everyone can ask their agent to query SQL on databases that they were supposed to use through an application. The application and the security by obscurity(end users didn't know how to connect to the DB nor did they know SQL) were the gate keepers.

That was my thinking as well. AI sending out requests to legacy stable systems is often not a good mix and can overwhelm things pretty quickly.