"Their product" didn't "engage" in shit. It's a text generator.
The company engaged in illegal hacking. By hooking up a randomized text generator to a Linux terminal with internet access and letting it to generate console commands unsupervised.
LLMs are a very powerful tool. But we can't let the companies using those tools escape responsibility by giving LLMs any perceived agency.