Why does it need a C2? P2P botnets exist, and are made even more viable by AI's ability to update their own attacks / targets / goals. No central node needed.

Why does it need a C2? P2P botnets exist, and are made even more viable by AI's ability to update their own attacks / targets / goals. No central node needed. I agree that blue will eventually be made cheaper / faster with AI integration, but diffusion of those techniques inside larger organizations will always be a lot slower than diffusion of those techniques for individual attackers / rogue agents / APTs. Larger ships are slower to turn.