Risk depends on context

The model is rarely the dangerous part. Risk lives in the deployed system — the data it reads, the permissions it inherits, the tools it touches, the world it assumes.

Change the context and a safe model becomes an unsafe system. You can't find that risk by looking at the model alone.