Model theft

A trained model represents real investment and can be copied like any other file.

For most organisations this matters less as intellectual property and more as a supply chain question: if a model can be copied, it can also be substituted. Knowing which model is actually running, that it is the one you approved, and that it has not been swapped, is the practical concern. Provenance matters more here than secrecy.