Regarding the controversy over whether AI-powered mobile operations constitute “hacking”, Chi Cheng, a lawyer at Jin Du Law Firm’s Shanghai branch in Beijing, stated that AI assistants are an extension of user intention rather than external intrusion. Therefore, platforms should not impose blanket bans. He believes that in principle, there is no need for dual authorization for GUI operations, as the system access remains under the control of the user themselves. General assistants do not have independent legal personality, and their actions are attributed to the user who controls them. Chi Cheng suggested that judicial decisions should limit legitimacy to real risks such as security and anti-abuse concerns, respect user preferences and autonomy, and avoid misusing old rules against new technological forms. At the same time, manufacturers should distinguish between low-risk procedural tasks and high-risk identity-related activities, return sensitive operations to users for confirmation, and retain logs. Within a compliance framework, they should guide technology towards good intentions and achieve a balance between openness and security.
Chi Cheng, a lawyer at DTF Shanghai Branch in Beijing, believes that the operation of AI smartphone devices is an extension of user will rather than external intrusion, and it is not appropriate for platforms to ban them in one go. He argues that in principle, no dual authorization is required for GUI operations, as it is still the user themselves who access the system; a general assistant does not have independent legal personality, and the consequences of its actions belong to the user who controls its operation. Chi Cheng emphasizes that judicial decisions should limit legitimacy to real risks such as security and anti-abuse, respect user preferences and autonomy, and avoid harming new forms of capability with old rules. Manufacturers should distinguish between low-risk procedural tasks and high-risk asset-related activities, return sensitive operations to users for confirmation, and retain logs. Within a compliance framework, they should guide technology towards good intentions and achieve a state of openness and security.