Don't see it mentioned in the post, can any of these problems exist for models in the safetensors format? Can't say I know enough about model serialization to understand exactly how much safer it is.
Pickle was created to store Python objects. Safetensors was designed to store (only) weights.