Yeah, this is quite concerning.

And FedRamp has some issues with data being sent out.

Our corp doesn't allow usage of local models because of concern about potential "agent sends out code to the net" issues.