This error happened because System Integrity Protection (SIP) was disabled. Apparently, CoreML models can be encrypted but not decrypted when SIP is not enabled. Apart from me, about 1% to 2% of our users appeared to have SIP disabled.

FB17542119 Thank you.