You absolutely can have (C) without widespread (A), you just need to limit the audience that gets the tools, and in fact the big labs are already engaging in (C) in collaboration with the government and vendors of critical software.

That you don't have access to (C) to harden your blog is a non-issue from a societal perspective, hardening the software that our infrastructure relies on first is simply more important.

Limiting progress by letting only select corporations access the stuff is how you fall behind China, UAE and in a few years even Kazakhstan.

Whoever wants to have access to (A) will have it, but letting only few select corporations provide (C) will mean majority will be priced out of (C).

Are you a shill or something?

I very much doubt China is going to let their citizens freely use AI for hacking. In fact they keep a very tight leash on corporations and their employees.