isn't model substitution a vendor accountability thing? and token tampering, is that not infra security?

do either of these need 70-95x the GPU time in "zksnark" proofs?