Comment by jacquesm

Yes, but that does not preclude the model from containing adversarial payloads so you still have to review everything.

Of course the same goes for any other model that you haven't trained up yourself.