[d-z-m]

> using a model from a place like Huggingface means the author of the model can execute any code on your machine

To my knowledge this is only a problem if the model is serialized/de-serialized via pickle[0].

[0]: https://huggingface.co/docs/hub/en/security-pickle

[hehdhdjehehegwv]

The fact that pickle even exists is fundamentally wrong to start with. They should not be permitted as a distribution format, period.

[1oooqooq]

it's pretty neat and functional if you are the one writing the code. you can do things like "hibernate" with zero developer cost.