"UEBA baselining with machine learning can adjust its worldview of a user's behaviour"
So all a hacker needs to do is ensure that his package can shift the pseudo-AI's worldview bit by bit and then he will be right at home.
Given that there have been Tesla buyers stupid enough to think that their car was self-diving, marketing any technical solution with the notion of AI is a surefire way to ensure a catastrophe. Complacency and habit means that when this so-called "AI" security will be in place, as long as it doesn't squeak, admins will just take care of the daily panics and not worry about whether or not the machine is working right.
Hackers of the future will have a lot of fun with these toys, I think.