Safety
GGUF models: none of the 198 most downloaded on Hugging Face can be rebuilt identically by a third party
The signature protects the original weights, not the quantified version that is actually executed. A study shows that there is currently no way to verify that a quantified file corresponds to the advertised model.