None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.
How confident are you that the machines they acquire root on in the future will never hold any model weights?
>It’s a tech forum, I expect a little CS know how from the reader.
You should get that first it seems.