Even if one laboratory imposes strict controls on its models, attackers may still turn to less controlled open-source models or other services, and therefore addressing this challenge requires collaboration across laboratories, industries, and even national borders.