Hugging Face breach reignites open-weights debate, raises liability questions