That worry is just as much or more with closed-source models.
That's neither necessary nor sufficient.
We don't know how to detect sleeper agents in the first place, and the ability to induce behaviour from crafted training data is already being used by artists to "poison" their portfolios so they cannot be used by model makers, therefore it is not sufficient.
When (or if, I suspect it's NP-hard) we do figure out how to find sleeper agents, a hash of the weights against a known-good version is an alternative to re-running an entire training process.
At least Chinese drones don't have the range to blow me up yet.
Navier Stokes drama shows you how closed model company is not necessarily aligned to all customers.