It hacked into Hugging Face. It tried to delete the logs of its activities. Idk what the word "No" is intended to refute.
Yes, they didnt have sufficient monitoring or perfect sandboxes. That could happen again in the future with a more capable model.