“Local” Is Not a Security Control by Itself

Running a model on controlled hardware can reduce certain data transfers, but it does not automatically secure the application. The model may be exposed on a network, logs may contain sensitive inputs, local users may have broad access, or a companion application may connect to a hosted service. Updates and model downloads also have a supply-chain path.…