This lines up. In the infosec community it is well known that OpenAI did not hire many security engineers or researchers pre-April 2026.

There has been a crazy hiring push from both companies to poach security engineers/researchers from Google, Apple, and Meta since Q2/Q3, but the response was very delayed. Many talented security engineers/researchers I know at Apple/Google/Meta (including myself) receiving these offers are worried about taking them due to the risks of criminal/personal liability and the more likely risk of tarnishing their careers.

So then… you’re liable?

https://www.brandonjbroderick.com/new-york/dog-leash-laws-ne...

indeed, that'd be a better angle than a cfaa violation