If they believe that this model is malicious or dangerous to the point of building a "product", and they uploaded it to huggingface without prior consent, then

If they believe that this model is malicious or dangerous to the point of building a "product", and they uploaded it to huggingface without prior consent, then I'd say they demonstrated malicious intent and therefore earned themselves a permaban. Intent matters even if their threat model doesn't make any sense. (see https://news.ycombinator.com/item?id=36661886 https://news.ycombinator.com/item?id=36661886)