I was lumping Anthropic in there with OpenAI but I didn't know about Alibaba (or Google and Deepseek for that matter).

So it would appear poor security for one.

Poor security yes, but complacency was the most likely reason. When you're used to models not breaking out, and people trying to break in, that's what you watch for.