The new preventative cybersecurity powers include potentially acting against countries considered friendly toward the US - a risky move, some say.