It’s reckless hacking. Should be punished like reckless driving.

Agreed. I missed that this was OpenAI 'driving' this time, but this doesn't sound like criminal intent. Maybe negligence at worst.