The image model answers only Bandicot
The local image model now refuses every request that does not carry Bandicot's own key, so other apps and web pages cannot use it behind your back.
Z-Image Turbo runs on a small server inside your Mac. That server used to answer anything on this Mac that asked, including a web page open in your browser. It now starts only with a fresh key Bandicot hands it, turns away every request without that key, and no longer lets web pages talk to it at all.