Neil Cameron examines OpenAI's report on the Hugging Face security incident, plus an independent investigation by METR and Redwood Research.