consider the opening line: "Last week, Hugging Face disclosed a new kind of security incident (opens in a new window)." the entire blog is written in the passive voice as if the event was an act of god. you did this.

"We consider this incident to be an unprecedented cyber incident, involving state-of-the-art cyber capabilities". the tone is frankly, excited by it, enthusiastic about it. excited about negligence and criminality.

notice there is no admission of a mistake, no remorse, no apology, nobody held accountable. business as usual. they do not care!

the anthropic blog:

there is not a single admission of a mistake. they are literally, unrepentant.

take the section about the response.

"How we’re responding We draw several lessons from these incidents.

First, evaluation environments that involve powerful autonomous capabilities also require significant controls."

you learnt that evaluations involving powerful autonomous models require significant controls? you did not realise that autonomous models require significant controls?

it is not a coincidence that this kind of line makes it into the response. the repsonse is laughing at the reader.

the RSP.

simply compare what was promised and what happened. broadly speaking, the rationale of the responsible scaling policy was to stop scaling at certain danger thresholds. in February 2026 they scrapped the policy to stop scaling and now allow themselves to continue scaling regardless of danger. the thing is, they were never going to stop scaling, they were lying. now the part about scaling is gone it is just "the responsible policy".

in case you need to see the founders committing themselves to RSP v1: [https://youtu.be/om2lIWXLLN4?t=1110&si=cBM1-Xmdt6TelXM7]