They are also banning local inference: "The models themselves may contain malware or other security vulnerabilities."

It doesn't seem that they have found the models to be actively poisoned, though.