but like, they did

The HF incident had them pwn their own cluster: https://en.wikipedia.org/wiki/2026_OpenAI_agent_cyberattacks...