Cohere’s Nick Frosst says Qwen models ‘may attempt to contact servers in China without prompting’, in a rare test result.