Safetensors were created because people were distributing models as python pickles, the basic built-in serialization format of Python.

https://checkoway.net/musings/pickle/

If you want in on the fun.

I thought it was other way round chronologically? Safe existed first then onnx ? May very well be wrong though