Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs