And really there are two different concerns here.

One is liability over action that harm individuals or smaller populations like a company. There is no escape from that.

Then there is the second liability of creating something that escapes in the much more traditional sense. If I release a virus that kills 90% of humanity, a I'm liable, but it's a bit past that point now. Isn't it?

Instead it's about risk management and preventing labs from taking bets that have unlimited liability for everyone.