In the aftermath of OpenAI’s attack on Hugging Face, experts say it’s time for everyone to take security far more seriously.