Chinese open models aren't a hacking Trojan horse, says Arcee CTO

The panic over Chinese open-weight AI models is getting loud again. With models like Kimi K3 and Alibaba’s Qwen undercutting proprietary giants on inference cost, Washington is murmuring about bans, and labs like OpenAI and Anthropic are clearly feeling the margin squeeze. But is the fear of a state-sponsored software backdoor actually grounded in technical reality?

Lucas Atkins, CTO of Arcee, doesn’t think so. And he has a financial incentive to agree with the ban-happy crowd—his company builds open models specifically to give U.S. enterprises a homegrown alternative. “A lot of people view this as similar to a Chinese software program. Like, it was coded with these x, y, z intentions” that a bad actor could simply command, Atkins told me. “That is fundamentally not how these models are trained.” He points out that once a company downloads model weights and runs them in a private VPC or air-gapped data center, the creator has zero access. It’s not a phone-home situation.

The code that runs the model—typically pulled from places like Hugging Face—is reviewable. That doesn’t mean it’s safe by default; Atkins insists enterprises should still throw every model, regardless of origin, through standard security and red-teaming processes. Most sophisticated shops are already doing post-training to mitigate bias and toxicity. The nightmare scenario of a model sneaking a backdoor into generated code is theoretically possible—Atkins can imagine an “acrobatic” training scheme triggered by hyper-specific context—but practically, he doesn’t know how you’d pull it off. The stochastic nature of LLMs makes the reliable injection of malware laughably unreliable.

Atkins argues the conversation is aimed at the wrong target. Instead of banning models that are currently the best bang-for-buck, the U.S. should focus on releasing something better. His own company benefits directly from Chinese research, learning from their advances and building on top of them. “We have tremendous respect for the people building those models, the individual researchers,” he says. His message to American labs is blunt and refreshingly simple: Stop lobbying and start shipping. “We need to give them something to talk about.”