I am having a difficult time trying to imagine the legal gymnastics that would be required for this to work without incurring liabilities on everyone involved.

I can think of hundreds of scenarios, but here is just one. I know your company stole data from me. I take over your BGP routes and force your traffic through my data-center. I underestimated the capacity I would need to take control of your data streams and now I am causing an outage for your customers. Am I immune to civil and criminal damages?