why would the inpainting model be downloaded into users home directory?

[aroguecoder]

as titled, and why especially it stored in .cache? and why would it named after it's hash instead of the model name?
this is kinda silly considering the masking models were stored in the extension folder, as far as i concern, anyone can just fork your repo and modify the download links to a model with malicious code if they want to.

[aroguecoder]

this has gotten even worse after some thoughts, since it's inside .cache folder.
anyone can actually put anything in there, not just the malicious party that's forking the code.