> How do you know that they don't train their models or append your prompts to add backdoors, or compromise your supply chain by including evil dependencies?

I read the code.