They have not caused damage (or enough that a counter party found it worthwhile to sue). They have to pay if they actually cause damage AND someone sues them. Clearly these conditions have not been met, but somehow people feel like some third party (the state?) should just punish OpenAI because of vague feelings.

That requires the victim to sue in court, or as some people have speculated OpenAI might have already settled with the victims in private.