Model back doors feel like baseless fearmongering. Something like https://rentry.org/IsolatedLinuxWebService should provide a good guarantee of privacy and security.

But what if the model is used to write parts of the kernel?