That still doesn't mean much unless you're doing your own training or getting the weights from a trusted source, and neither of
those mean much without knowing something about the data being trained on.
If someone is trying to influence your results, running the inference on your own infrastructure prevents some attack vectors but not some of the more plausible and worrying ones.