So where is the list of malicious models? What's the advantage of paying jfrog over using safetensors? Why is it legal for them to make these claims without p

So where is the list of malicious models? What's the advantage of paying jfrog over using safetensors? Why is it legal for them to make these claims without providing a discrete list of known malware infected models? This seems really shady, to me, bordering on an extortion racket. "It'd be a shame if something happened to your computer, but don't worry, you can pay us for protection..." In addition, where is the HuggingFace report on models known to have been infected? HF has a responsibility to inform people of potential issues if they downloaded something before it was flagged. Maintaining a list of known bad models would be a good idea, I think.