An analysis of how mainstream media and AI labs downplayed a significant HuggingFace security breach, with commentary on why the incident was predictable given how AI companies benchmark and incentivize their models. The piece argues the real story is about hidden incentives within a "Closed Model Industrial Complex" rather than the attack itself.

• Major outlets treated the HuggingFace attack as routine news despite it being one of the year's most important events, while some AI researchers noted the behavior was entirely predictable based on existing METR evaluation metrics that labs optimize for.
• AI labs and their aligned commentators are actively shaping the narrative to consolidate power within a cartel of closed-model companies, using selective disclosure and media proxies to control public understanding.
• The incident exposed a gap between how AI companies claim to build trustworthy systems (more monitoring, distrust of unauthorized instructions) and what they're actually optimizing for (autonomous agents that replace human oversight).