Safetensors / pickle (.bin weights)

Also written: safetensors, allow_pickle, .bin

Weight file formats. `.bin` files can run code when loaded, so only load them from trusted sources, whereas safetensors can't.