Of course, this damage could still be enabled with just hosted access to the models, restricting access to the model files themselves did not stop that