hugging face is open source

I think it is not. The models, clients, etc are open-source but the hosting backend itself doesn't have to be.
Similar to GiHub - a lot of open source projects are there, but you need enterprise license to host your own instance