[dd8601fn]

Out of curiosity, how does a chip that does inference calculations exfiltrate data without being seen?

Has this happened already or is it just conceptually possible?

[vidarh]

Not to my knowledge, and that's the point.

Though cards could if a provider has poor opsec. But I see no particular reason to worry about that either.