> how do you stop task submitters from rooting your box and recruiting it into an AI botnet (for free)?

Only real way to do this is run the job in a VM with a GPU and CPU+motherboard that support passthrough (read: not consumer NVidia GPU's, your CPU+board must support an IOMMU and your card cannot freak out when being reset after initialization).