If they are confident in their discovery they should pay some scientists to start making this and testing it out.

I think they should acknowledge that they are liable for damage done now and in the future by their servers

Publish all their external ips and if hacking is attempted through them have easy and strict monetary payout with independent review process. Model it after the CMS IDR process

If they are caught using proxies 10x the fines

Limit their GPU quantities and force them to be more efficient with their resources.

Enforce attribution on their results