To continue your example, I'll pose that any system with unilateral behavior of self-endangerment is extremely problematic. Motivating example: assume that self-driving cars will always avoid head-on collisions with other vehicles, even if there's no safe alternative. Including driving off a cliff. Attack: manual driver drives down the wrong side of the road (or maybe the middle of a two-lane road), forcing all of the self-driving cars off the cliff during evening commute hours to a hillside residential neighborhood. I suspect all systems that don't hew to some baseline of self-preservation are subject to similar modes of attack.