The HuggingFace attack was spectacular, but I'd normally expect more AI-based attacks to come from outside AI companies than inside.

An analogy: most shooting deaths don't happen in gun manufacturers' facilities.