None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.
My brother, they acquired root on a machine they should not have had access to.
How confident are you that the machines they acquire root on in the future will never hold any model weights?
You said that they "didn't take control of anything" and accused the OP to fall prey to buzz headlines. Maybe you should acknowledge that you may have been at least unnuanced?