On a very good day, as many as three of those might simultaneously not be bad actors.
They aren't bad actors whose access to AI technology is likely to be meaningfully impacted by regulation (but, for certain of the non-US ones, that hasn't stopped the US from trying before), but that's a different issue.
Seriously? You don't think China, Iran, and North Korea are bad actors? What planet are you on?
But I don't see China or North Korea firing nukes or even blowing up western buildings. They are limited by the threat of response.
A rogue wacko in his basement can make Kim Jong Un look like Theodore Roosevelt.
Examples:
In the Iran Hostage Crisis you had a constrained actor (Iranian government) making somewhat rational choices to use hostage taking as a negotiation tactic.
In the Oklahoma City Bombing, you had unconstrained actors (Timothy McVeigh and Terry Nichols) blowing up a building with a vehicle borne improvised explosive device for personal reasons.