I kinda wonder if it’s a derisking maneuver. If the AI runs on the client hardware you gain certain characteristics: the compute happens on the client hardware

I kinda wonder if it’s a derisking maneuver. If the AI runs on the client hardware you gain certain characteristics: the compute happens on the client hardware (saving apple $$) and if a bad actor succeeds at jail breaking from the AI controls then only the client hardware is owned (instead of a multi-tenant apple server). Just my naive thoughts