Pickletensors are collections of weights and have the ability to run code, this format was used because it was convenient but has the security issue so they made the safetensors format which are just the raw weights essentially. Functionally identical but safer.

@aisignin Fucking dude, you're damn right! You have no idea how much you helped me, it doesn't say anywhere that Pickletensor is ckpt !)