They're taking security seriously with this one, with their own disclosure page, like Anthropic did for Mythos. https://cvd.z.ai/