It doesn't matter much whether they are lying about how secure the environment is when they train and ship these models for other actors. Believe it or not, they're not spending hundreds of millions training these models for only themselves. Hacking Hugging face is an achievement on its own and the important relevation here.