I find it trustworthy since we had Hugging Face's account first: https://huggingface.co/blog/security-incident-july-2026
I don't think they have any real motive to shill OpenAI, probably closer to the opposite since they're so involved in open weights