I agree, but isn‘t it basically impossible to do any kind of IP protection for LLMs, if someone dumps the disk or RAM - they have your weights.

I wonder how the cloud players get around this, maybe Antrophic trusts AWS and Google not to look, but do they really just trust Musk?