Yup, the post assumes that the openweight model wasn't already backdoored which as you say more likely.