I don’t get why this is an issue? You can run Claude/OpenAI SOTA models through Amazon bedrock. These weights have to live somewhere to run on Bedrock.

somewhere = an AWS data center with multiple layers of security and NDAs

They won't sell/rent/license the weights to an end user at any price because they don't trust your security.

I work in embedded space. Just because it’s in hardware doesn’t mean you can’t “protect” it. Most modern software (regardless if it’s hardware or not) can be cryptophically signed.

[dead]