Experts are critical of private companies controlling access to powerful AI vulnerability-hunting technology.