Have you considered that there are reasons to do things beyond financial incentives? This incident is obviously very interesting, particular to the type of hacker employed by Hugging Face.
I'm coming around to the concept that this account might be influenced by financial incentives