They absolutely could. There's a decent claim for OAI being reckless or at least negligent.
The limiting thing, in my mind, is the need to show harm. How much did OAI's recklessness hurt HuggingFace? There's some dev hours devoted to the cleanup but it's not like it devastated their business. Their legal team is probably a lot more focused on the Nvidia acquisition instead.