An AI worm might actually be possible in our current Internet-scape if it manages to find hosting that takes crypto and a way to make money with crypto transactions. I wonder what are we going to do if it actually happens and it goes rogue.
Service providers are still responsible to police what happens on their network. KYC already makes it very difficult to get service completely anonymously with only crypto changing "hands".