What about attacks on people using said ai systems? You know, attacks used for manipulating our behaviour patterns, violate our privacy and steal our digital property.
I suspect the juicy threat model for AI is targeted individuals. Either those with direct power or, more chillingly, a selected group of "nobodies" who aren't on their guard, setup to do some damage when the right sequence of messages are sent - the effect of their directed action being more than the sum of the parts. AI allows this to happen at far greater scale, and also allows better target identification.
What a time to be alive!