> could still hide backdoors that could be near impossible to detect.

But it won't change after you download it, so you can isolate those problematic cases and use another model for different use cases