“There is a national security risk that Chinese open-source models could contain hidden malicious code that is difficult to detect with current interpretability tools.”