is the HuggingFace attack something that should be taken seriously? yes.
is it the first warning shot of a machine takeover? no.
will issues of this type look like a tractable / mostly solved problem with proper precautions in 6 months? yes.
will that happen automatically? no. as always, will require work from smart people and their agents.