What law says humans are criminally responsible for actions of autonomous agents that did things they didn’t intend and couldnt reasonably anticipate? I am not aware of any. That would violate the general rule that criminal conviction shows intent to commit the crime.

There is an entire body of law around principal agent liability. I am not making anything up, I went to law school and practiced law in New York. I was not a criminal lawyer but not pulling this out of thin air. Principals generally aren’t vicariously liable for the criminal actions of human agents the employ or delegate to unless a prosecutor can show the principal intended the crime

Huggingface suing is at most civil liability the can only result in a monetary damages ruling. That becomes a cost of doing business.