New AI security model highlights both defensive potential and governance concerns