China Government can create the poisoned Trojan Horse LLMs, and then simply feed it to the USA, because people in the USA have a false sense of security about Open Weights LLMs they self-host.
People think if you self-host stuff you're totally safe, but the weights can be pre-poisoned.
AFAIK the threat vector I'm identifying has never been exploited, and I've never even heard anyone else describe or mention it.
