I find it fascinating that if I tell Claude to hack my fake Bank of America website and it instead, in classic LLM fashion, hallucinates and hacks the real one then there is no law that addresses this?

Quite the loophole. I wonder what other crimes are legal as long as you get an LLM to do it?