Disallow pickle loading in npz files.

PiperOrigin-RevId: 766740730

Author: hertschuh

tf_keras/saving/saving_lib.py

@@ -639,7 +639,7 @@ def __init__(self, root_path, archive=None, mode="r"):
                 self.f = archive.open(root_path, mode="r")
             else:
                 self.f = open(root_path, mode="rb")
-            self.contents = np.load(self.f, allow_pickle=True)
+            self.contents = np.load(self.f, allow_pickle=False)
 
     def make(self, path):
         if not path: