AI companies should pay when their AI breaks into someone else's systems