The models may well contain malware or security vulnerabilities. But they are at least open to inspection because the weights are available, the same can not be said about US providers of inference such as OpenAI and Anthropic.
They're about as indictable as binary blobs found in your BSPs or the 3rd party drivers you get through Windows Update
Because it is DeepSeek in China, they must have open weight models to be even partially acceptable to the world. I am sure many would balk at using a Chinese company if its products were not open source
Not only open to inspection, you can also post train it to get exactly what you need from it, both in terms of capabilities and alignment.
It's also odd for them to single out DeepSeek in particular, and not just any model from the PRC?
Model weights being open to inspection means absolutely nothing. What are you going to inspect in a bunch of numbers?
I don't know if inspection would be practical. How do you inspect the weights for an intentionally hidden trigger that writes malware?