The fact that latent behaviour can be encoded into the model weights, and is difficult to discover through static analysis, is an absolute security nightmare.