> I'm not saying we should trust megacorps, but they have a very strong incentive not to build these sorts of backdoors into their models;

All it takes is one disgruntled employee. Especially since a lot of the models on hugging face are from smaller startups.

Or an employee with true loyalty to another entity. Cf the OpenAI employee alleged to have planted a voice bug.