> What's to prevent the LLM from

A NN per se is a file... The executable that runs it can "act"...