OpenAI published this to the internet. It's likely that anyone nefarious has already found this. Going public is up to the hacker. I'm sure OpenAI would prefer coordinated disclosure, but there's no reason to let them dictate what people do with information.