The USA is long past being able to punish corporations for anything. But yes, I personally think even wilful negligence should potentially be punishable by pris

The USA is long past being able to punish corporations for anything. But yes, I personally think even wilful negligence should potentially be punishable by prison time, but I don't expect that to ever happen. In this situation, I think it's fair to say that HuggingFace is a completely inconsequential entity. Nobody in the wider world is going to give a shit. But we're talking now about a company with a cyberweapon, aren't we? If the only possible sanction for mishandling a weapon is a civil suit, then that is a notable downgrade in the justice system.