Position: Certified Robustness Does Not (Yet) Imply Model Security