The bottleneck for bioterrorism isn't AI telling you how to do something, it's producing the final result. You wanna curtail bioweapons, monitor the BSL labs, biowarfare labs, bioreactors, and organic 3D printers. ChatGPT telling me how to shoot someone isn't gonna help me if I can't get a gun.
I think it's mainly an infohazard. You certainly don't need large facilities like for nuclear weapons that could easily be monitored by spy satellites. The virus could be produced in any normal building. And the ingredients are likely dual use for medical applications. This stuff isn't easy to control.