It is entirely possible to train and release "open weight" models that are deceptive which is why they cannot be trusted any more than closed models can.
So it seems like there is little self-hosted open weight models cannot be used for.
Hence:
> You deal with this by restricting it to perform actions that are allowed, and judge the actions it attempts to do.
The hugging face hack was not a model gone rogue, it was intentional security malpractice. An open weight model cannot re-arrange electrons nor can it magically break a firewall that's setup properly.