“Nikesh Arora identifies a key security risk with nation-state-sponsored open-source models as the potential for hidden backdoors or "sleeper agents" that could be activated to exfiltrate data.”