I don't think this is technically possible without something like homomorphic encryption, which poses too large of a runtime cost for usage in LLMs

They don't even try to proof it another way.