That Alibaba one was a sandbox escape (I agree those are common) but what's new with the OpenAI story is an attack against another company.

This wasn't a small attack either, Hugging Face published a security advisory for their users while they were still figuring out what happened.

It’s a purely virtual distinction especially in a company that has no notion of intellectual property / habitually takes what it wants.