The fact that latent behaviour can be encoded into the model weights, and is difficult to discover through static analysis, is an absolute security nightmare.

More discussion: https://news.ycombinator.com/item?id=50246658