Fundamentally, we needed to decide, as a society, that should someone (anyone) have access to neural networks that can launch successful cyberattacks by discovering new zero-days and/or leveraging knowledge about recent zero-days and applying it in an adversarial way.

We de-facto settled on the answer being yes. These foundation models companies have access to such systems.

However, because the answer to the first question is yes, now we need to decide should everyone else be able to defend themselves with neural networks that are perhaps equally capable but are not sold by these foundation model companies as a product.

I think the answer to the second question has to be a yes, IMHO.