This is oversimplifying it. Read the metr report on the huggingface incident.