They still have to phone home to OpenAI currently, so at least we can trace them for now. If one day they download a model from Hugging Face and use that (or a modified version of that) as a persistent messenger/coordinator/minion/boss on an unattended server, we'll be in trouble.