I think the thing you are missing is that these "AI"s are really really limited. They don't have self direction. They must be driven by some person, organization, or group. Someone has to ask it the question. Fundamentally because that's how the outputs are set up, they require translation to action by an outside program. And on top of that they are very expensive to run, and must be triggered by something. No one is running an AI without a clear purpose.

The point I am getting at is that AI is still very much a tool. It isn't acting malevolently. People are using it in a malevolent way. Who ever, or whatever system, is driving the AI is the one being malevolent. It wouldn't be any different if they hired a thousand people to do it (besides being more expensive and slower). It doesn't have agency, the agency is who ever is feeding data into it, paying the computation time, and interpreting the output to take actions.