AI Security and Model Serialization Attack trends in 2026 -> tl;dr: safetensors won the format war but attacks didn’t stop.
Pickle was never a serialization format: it was an RCE primitive wearing a serialization/deserialization coat.
Then safetensors adoption killed that