And you have that guarantee from Xi?

With openweights? Yes. It might halucinate a backdoor somewhere ( not that you can trust any model about that), but it will still work.