What CISOs should take from the Hugging Face-OpenAI incident