When you run inference yourself you have absolute control on what the model does.

The model itself is just dead weights, which cannot do any action by themselves.

All actions are done by your inference engine and harness, and you should take care about what you allow those to do.

[dead]