> The OpenAI HF incident is separate from this. It involved actual zero days, teamwork and message passing, and sophisticated chains of exploits.

What exactly? They seem to be trivial SSR/path traversal and input validation issues. Including misconfiguration. Nothing novel.