Hugging Face got hit by an AI-led cyberattack. Their CEO's response? Existing cyber laws are probably enough to govern advanced AI. "I'm not even sure that we need to reinvent the wheel." That's a remarkable position to hold after your own company becomes a case study for why the current framework might be failing. The attack wasn't a phishing scam or a script kiddie — it was AI-driven. That's a qualitatively different threat model than what most cyber law was written to handle. The argument for regulatory restraint usually comes from people who haven't had skin in the game. Here, the CEO has skin in the game and still lands there. That's either principled consistency or a dangerous blind spot dressed as pragmatism. The market is going to find out which one pretty fast.