AFAIK, their open models are distributed as weights, not executables and are therefore not able to start network connections / run code. There is of course tool-calling functionality but that just works by having the model output a special pattern and having something external run predetermined commands based on that.

They are open source models, nothing malicious about them. I'd be much more careful about where you run your agents on. The wrong prompt can even make a non-malicious model misbehave.

The beauty of it is that it doesn't need tracker shit. It works to destroy the US AI bubble even without anything malicious within.

And considering how hard the US researchers have been trying to control the output of their general LLMs, with little success, why would the Chinese have found a way before everyone else even thinks it's possible?