consider safetensors/ONNX over pickle
