In most places, running the model isn't actually the real problem for security, its keeping the training set secure. More over, accidentally leaking the datase

In most places, running the model isn't actually the real problem for security, its keeping the training set secure. More over, accidentally leaking the dataset through crafted prompts. Its great to see some level of verifiability of hardware, which is an improvement.