As long as I can say, "Model A, look for security holes in this code by Model B," I don't see this being a serious problem.

It's when the vendors and/or governments in charge of Model A decide that I'm not allowed to do that, that I have a problem.