ironically, at my large enterprise, they aren't yet distinguishing between "chinese models" and "chinese models hosted at microsoft foundry". so far it's just _banned_. i'm not at all pretending it's like that at other orgs.