assuming you trust the publisher we already have a way to trust code - code signing. this is no different.
You can't trust any model that you didn't train yourself.
You can't trust any model that you didn't train yourself.