Comment by amelius

> loading them with torch.load() can lead to RCE (remote command execution)

Why didn't the Torch team fix this?