OK, that's some interesting information but they used OpenAI without guard rails to pull off the attack so how did they do that? That's according to the article, so it kind of invalidates the point you're making.
The defender (huggingface) did not have access to the top models so had to use weaker ones to detect the threat.