Three labs, three breaches, one vendor. The AI hacking story was never about the models.