Many legitimate products and services, from programming libraries to adversary simulation tools, can directly be used either for good or for bad.
If, when, and how to use them are therefore important moral and ethical matters that can’t be solved by automation or by one-size-fits-all rules and regulations.