> Why do I suspect the offence will always be ahead of the defence in these areas?
because destroying is easier than creating/entropy increases over time?
The only solution I can see is working on turning bad actors into good actors, or another way: positive reinforcement cycles.
No idea what that would look like with regard to LLMs though.