The Hugging Face incident story was truly unbelievable if you read / watch the details It didn’t really seem that way? Leaving containment seemed more like a configuration oversight than a skill on the part of the model. Accessing HF involved an 0-day but the commentary I saw didn’t indicate that it was a next generation hack. Given that AI exists, and can scan or otherwise find vulnerabilities, maintainers must do so because threat actors inevitably will. It remains to be seen whether the whole race will improve security generally? I imagine not?