When it comes to open-source models, there’s really not much to say about security