Any individual running a local LLM that hacked a company would absolutely be held responsible for the LLM's actions

What if he could present evidence that he didn't tell AI to do it? Is it reckless negligence to give any AI agent access to the internet or even not prevent it 100% from gaining it? Because millions are doing it daily. Pretty much everybody who's doing anything with AI agents.