I see on your website that you claim the subprocessors are SOC2 type 2 certified, but it doesn't appear that you claim anything about your SOC2 status (in progress, certified, not interested). I mention this because I would suspect the breach risk is not that OpenAI gets popped but rather that a place which gathers continuously updated mirrors of source code does. The sandbox idea only protects the projects from one another, not from a malicious actor injecting some bad dep into your supply chain