One big difference is that the US doesn't have much public record of using state espionage resources to steal industrial secrets to give domestic industry a leg up in the market, whereas CCP very much does.
And while I use and love the open weight models, it seems likely to be pretty hard to prove conclusively that they have no reinforcement-learning-trained proclivity towards curling specific URLs if the topic happens to be some very specific thing that the government is interested in, when used to drive agents.
So it depends who you are. If you're a company, you might have something to fear. If you're a private citizen, maybe not so much.
I don’t think US companies could ever fully trust models sponsored by foreign adversaries. How would you ever verify they are safe?
Provenance of training set is going to be critical. It’s largely ignored now, but the first time a malicious exfiltration occurs it will go off as if a bomb was detonated.
Only way would be an actual open source model: code + training data