“Just like with weapons and conflict minerals, import and export laws also need to regulate the circulation of malware, intrusion software, and remote monitoring tools”