Everyone conflates "AI model" with "AI platform."
The truth of the matter is that if you are interfacing with the DeepSeek service, you don't have control of the version of the model being run, the hidden system prompts, or any co-agents that might modify output before its sent to the user/service.
The model itself could be completely innocent. It may not have had any weights modified and was trained on honest greenfield data. But we control literally nothing about the environment it is running inside of.