This is weird and reactionary. Lots of organizations are continuing to refuse to use chinese models due to security and IP concerns. Anthropic/american models aren't going anywhere anytime soon.
I suppose this is like when Anthropic was using “prompt modification, steering vectors, or parameter-efficient fine-tuning” to poison the work of people working in the LLM field, including academic researchers.
When the model is open weights you can even pass every token (including the chain of thought) though a fourth-party lightweight model like gpt-oss-safeguard to check that it has not become adversarial.
I feel like that's a threat that isn't super difficult to block. Unplug it from the internet, require it to go through an API intermediary to access web pages.
It could, but exposing that would doom the company entirely, and AI doesn't generate code with near the quality needed to get a model to mass adoption, insert malicious underhanded code, ensure that consistently looks innocuous enough to never be noticed, and- most importantly- actually exfiltrate data without being noticed. Once it is noticed, it's game over across the board.
You don't even need that, all models are susceptible to prompt injection. You already need to take extreme security precautions and assume all models can essentially behave like attacker-controlled rootkits.
> Lots of organizations are continuing to refuse to use chinese models
Correction: Lots of organizations are refusing to use Anthropic Fable because they have forced opt-in data collection as part of their privacy policy, even for Enterprise.
Both things, and both reasons, can be true at the same time.
Not everyone's going to care about Anthropic requiring data collection (a similar debate plays out with regards to "pay or consent" on website tracking), just as not everyone cares about China with regards to security/IP issues (if they did, a lot more would be banned besides occasionally-Huawei).
> Lots of organizations are continuing to refuse to use chinese models due to security and IP concerns
These customers exist (e.g. US military) but there's not enough of them to justify a trillion dollar valuation.
Anthropic's valuation is predicated on growth. If they start going backwards and losing customers to open models, it hurts their ability to gather investment and with it the ability to train new models, leading to a death spiral.
The best they can hope for is that the US gives them state aid to compete with China, however their relationship with the current administration is not great.
I would assume the opposite is true — with an open-weight Fable-class model, doesn't demand for GPUs go up? Plenty of companies can now look at what Anthropic is offering — high per token costs for a very intelligent model — and do the math, and at some point it makes sense to just rent the GPU yourself and run Kimi on it if you get similar intelligence without paying Anthropic's margins (albeit with high upfront capital cost).
This would drive down Anthropic's margins, but drive up demand for datacenter and GPU capacity. It's not that people would be using fewer GPUs, they'd just shift demand from high priced token vendors to direct GPU rental, which benefits datacenter companies while hurting Anthropic.
The cost to run Kimi is the cost of the GPUs (+ overhead of hiring humans for now to manage it). Kimi K3 does not change the demand curve for LLMs, it only changes the possible suppliers — and they're all competing for the same supply-constrained resource, which is GPUs in datacenters. Regardless of who is serving the model, or how, they're going to need to rent or buy GPUs in datacenters. Hence: this is great for datacenters.
Oracle is fine, it's just that they can't really expect political decisions that hindered it to accquire TikTok which will be slated to be the biggest customer if the deal went through.
Now they are betting with Project Stargate but it also seems to be crumbling down.
But don't forget that they literally hold the biggest databases, both in commercial and open source, that is, Oracle Database and MySQL. Plus Oracle Java they literally controls at least 30% of the internet's software infrastructure.
And also with a good team of attorneies enforcing the licenses, they can squeeze so much money at the cost of morality.
Also recently they downgraded the always free OCI ARM instance from 4C24G to 2C12G without telling anyone.
New enterprise java licenses are going to milk enterprise just like broadcom is doing. New license deals makes you pay for employee total number (including contractors) instead of for users of oracle java.
Even boring, slow moving companies are well on their way to eradicate the last traces of oracle java. We kicked the last of that 2 years ago, despite having >3000 different systems across the globe. (We started circa 5 years ago).
They're drowning in debt and risk is increasing. If these US models don't keep holding up their valuation will tank further and some will recall the loans or ask for different terms.
The inverse is also true: many companies are refusing to use American models due to security and IP concerns. And it's more concerning here: American companies straight up say they will train on your IP; local Chinese models structurally can't. The security concern goes this way too: for American companies, you're relying on their own security infrastructure and essentially blind trust. For locally hosted Chinese models, you 100% control the security story.
The reality this demonstrates: most US companies don't give even 2 shits about their IP, and are fine willingly handing it to Anthropic et al. Those that do care largely must care contractually. For group 2, they're either using Chinese today or aren't using AI at all. Those are the only two valid options, there is no secret "use US but self host it" third option.
This is such a common omission: the Chinese models are open, you can host them yourself on your premises. So privacy and independence.