Huggingface (or some other benchmarking company) needs to put its servers in a country with real cyberintrusion laws with teeth. Somewhere where an announcement like this would result in prison sentences and the company’s license to operate being revoked in the country until they could demonstrate via third party audits that their operations are acting in a secure and legal manner.