Can you say concretely why HuggingFace is lying about being successfully hacked?

Is the claim that the benefit to HuggingFace of "ooo wow someone else's proprietary AI is so good" is greater than the downside of "HuggingFace is not a secure service?"