Earlier quoted context omitted.
My dog has agency, but if I refuse to keep him on a leash and he bites a kid, I'm still legally responsible for it.
Analogies can take you only so far. A dog cannot launch a cyber attack.
But an AI can launch a cyber attack?
That is all the more reason to make humans accountable for the actions their AI prompts produce.