The OpenAI model used stolen credentials and zero-day exploits to access the Hugging Face non-published data.
That is a criminal offence in the US, UK, EU and most other juridstictions. Precedent shows that intent is not a defence
Had the Chinese DeepSeek organisation performed the exploit, the current US executive would be presenting it as an act of war.