There's all the people that allow them shell access as well. That's all the OpenAI "hack" of Hugging face was. A bash shell with a model attached. Now think of all the people running that inside of security perimeters.