The XP example doesn't quite fit IMHO.

Here it's their own programs doing the things, not some other organization or nation hacking their XP.

You can say with a straight face "Russian hackers should not have hacked our XP and they are bad people for doing so" but it's weird to look at your own program and say the same thing to it.

You launched it, at least keep an eye on what it's doing.