[dmnmnm]

Safetensors were created because people were distributing models as python pickles, the basic built-in serialization format of Python.

https://checkoway.net/musings/pickle/

If you want in on the fun.