Hugging Face's CEO said the defense was slow because the team initially did not deem the issue 'super critical'.