If I was someone who funded/relied on A/I's services I would have been trying to figure out what would it had taken for the US State Department to produce evidence for their allegations and would have lobbied for some sort of determination of whether the scope of A/I's involvement with said parties and their actions violated their own policies/terms of service.

Otherwise there is a way to look at this as A/I getting away scot-free for failing to administer their policies, failing to hold bad actors accountable and ultimately letting down individuals and organizations who lawfully used their services.

I'm also not surprised that A/I themselves never anticipated something like this happening and did not have some sort of protocol in place to deal with it. They had 25 years to do so.