Exactly what are the possible 'security issues' of self hosting an open weights model?

It may have been backdoored during training, potentially causing it to randomly start wreaking havoc at runtime, possibly in a clandestine manner (e.g. sneaking in bugs into generated code).

e.g. be trained to favour including compromised dependences into your projects.