Author here. I've been struggling to characterize what has made me so uneasy about the Hugging Face incident. It finally clicked for me this AM: our threat modeling priors are all broken. You should assume every threat actor has nation state level capabilities, and move to an assumed breach model.