Some tech companies agree they won't help nations launch cyberattacks, but will they have a choice?