> Or secure infra offered by AWS to self-host your own models There is no such thing as "secure infra" hosted by someone else. This might still be fine, depen

> Or secure infra offered by AWS to self-host your own models There is no such thing as "secure infra" hosted by someone else. This might still be fine, depending on your threat model, of course, but if your weights absolutely must never leave the confines of your org, you cannot use any shared hosting provider, because they just offer legal coverage of incidents. But if your moat is your knowledge, legal doesn't matter as much as the knowledge being suddenly unmoated.