The safetensors format was created exactly for this - safe model serialization

https://huggingface.co/blog/safetensors-security-audit