Shower thought: If a rogue AI agent can spread across the internet, it might be regulated under the same ruleset as other self-replicating dangerous critters: biosecurity / quarantine type laws. E.g. Who is allowed to own some live smallpox/agents? Who is allowed to study smallpox/agents to make a better smallpox/agent? Who is allowed to carefully expose smallpox/agent to environments where it can thrive? Some people, potentially, are allowed, under some rather regulated conditions ... but not, like, 10,000s of employees of some tech giants.