I don't see why they couldn't contract out to an American security firm that has access?

Surely it's forbidden by the agreement with Anthropic