Developing an offensive AI hacking capacity does not automatically create an equivalent defensive capability