SaaS inference services can just spy on you passively, the old fashioned way; no need to bake nefarious behavior into the model itself, except perhaps to make it 'curious'.