In finetune/dataset.py:39 and finetune/qlib_test.py:220,247, pickle.load() is called on data files with no integrity check. Pickle is inherently unsafe - malicious pickle data can execute arbitrary code during deserialization.

Suggested fix: Use safetensors (already a dependency) instead of pickle, or add HMAC signing/verification before loading.