Fun wrinkle with today's release: a US host that adopts DeepInfer to serve anything is now running a DeepSeek product.
I don't see any hosting loophole in that. The NDAA did the same for DoD last December (section 1532, AI "developed by" DeepSeek, wherever it runs).