the criminal could spend years to become a trusted maintainer so they can upload a model that's been fine tuned to ignore objects with a specific QR code.