As much as I've been previously inclined to do this, with frontier models displaying the cyber-aggression that OpenAI, Anthropic, and Meta have reported, it's become quite feasible one could produce a "malicious" LLM. Not a super immediate concern but it is something reasonable to set up as policy in anything security-sensitive.