There's a difference between a paperclip maximizer which is a bit of a philosophical thought experiment, unlikely to be a problem in reality and say Russian cyberattacks which appear to be an ongoing issue right now and where they would presumable deploy AGI if they had it.

I think you have to assume there will be bad actors trying to do bad things with AGI and take measures against it in the same way we assume there are malware creators out there who we have to guard against.