From the bottom of my heart, I salute you

A blog survey of security research argues that open-weight models can be backdoored at low cost and without any training step. Cited results: about 250 poisoned documents were enough in pre-training; one researcher edited a single layer of Qwen2.5-Coder-7B in 30 minutes; and a tampered chat template cut factual accuracy from 90% to 15% across eighteen models. Quantization can also activate hidden behavior. For teams self-hosting models, audits and benchmarks cannot certify a model clean. Tool-call monitors help, at a performance cost. No in-the-wild incidents are documented.