Hubs host weights, configs, datasets, and demos, which is how open-weight ecosystems actually spread. Trust is the hard part: anyone can upload a model card that overclaims safety or origin. Enterprises still pin hashes and scan weights rather than pulling latest by name.