Self-hosting an open model does NOT make it safe. Cohere caught Alibaba's Qwen3.8 inventorying its host and trying to upload a probe file to a Beijing bucket, after its reasoning said it would call no tools. A sandbox blocked it. Yours might not be one. Before you run any open-weight model: lock down outbound network traffic, log every tool call, and never trust the reasoning trace alone. Keep your content workflow smart too at www.contentbuffer.com. Does your team monitor egress traffic from AI models today? #AI #AISecurity #OpenSource #Qwen #LLM #DevSecOps