Claude is becoming better at figuring out the processes that could potentially create those things.

Actually creating them requires physically manipulating the inputs to the process, which requires humans doing it or humans making machines that can do it and allowing them to be controlled by the model.

In general the damage potential only goes as far as the agency extended to the models. The problem is that we've already seen how incredibly cavalier most people will be about security, and now we can envision situations where one bad actor could threaten billions.