They are also banning local inference: "The models themselves may contain malware or other security vulnerabilities."

It doesn't seem that they have found the models to be actively poisoned, though.

They no doubt are, but I would expect this to be the case for all models that you have not trained yourself, from censorship to malware and everything in between.

They are not banning local inference. The USG has several fedramp dc's where they run local weights of several proprietary models. You guys are getting ridiculous