but the ckpt format has exactly nothing to do with the security failing here, and everyone knows pickles are a security risk & are moving to other formats