> Models don’t have access to their own weights.

cp -R /home/model <somewhere else> is all they need.

It is not a model it does the hacking but rather a prompt, and that prompt can run on other models.