>ut we obviously don't want everyone to have capabilities like and beyond what caused the huggingface incident in every domain

Why not? These tools are also very useful for defense, you just need to apply them.

Read the HuggingFace postmortem, they had to use an open model because all others they tried refused to do any work.