@johnschulman2: > That doesn't tell you what data it was trained on, how it was trained, what potential backdoors...

> That doesn't tell you what data it was trained on, how it was trained, what potential backdoors it may have etc.

It's possible to do a lot of forensics to figure these things out -- this problem is under-studied