The security measures OpenAI failed to implement are not technical innovations beyond their capability, but the failure was about culture, people and processes rather than technology

none of the measures discussed above are technical innovations beyond what OpenAI is capable of. As a company, they have the talent to do all of this. However, cybersecurity rarely comes down to technology. More often than not, it is about culture, people and processes. That is what failed here.

https://garymarcus.substack.com/p/5-lessons-from-the-openai-hugging