Sounds like an attack vector waiting to happen if you deploy enough competing expert devices into a crowd.
I’m imagining a lot of these LLM products on phones will be used for live translation. Imagine a large crowd event of folks utilizing live AI translation services being told completely false translations because an actor deployed a 51% attack.