At a org like Google Cloud barring rogue L5/6/7s acting on their own any sniffing of distillation will get leaked. Too many chaos exist at a org size of Google to systematically do it given the contract at hand. This is a company where every spicy memo or mild gossip will risk leaks.

This is speculation, but funnily enough Gemini models show the least evidence of being distilled from OAI or Anthropic compared to everything else in the market.

GCP already hosts Anthropic models so probably trusts and lawyers.

Probably a very strict contract, and letting OpenAI read all the session logs like they do for their own customers.

Nvidia GPUs let you load encrypted weights onto them and to decrypt on chip so Google would need to have some sort of Nvidia management firmware attack to read from HBM while the GPU is live

First answer this: How are they trusting OpenRouter not to distill them?

America is a high-trust society.

Contracts and lawyers are more powerful than any technical tool.

Google Cloud couldn't give a shit about Google Deepmind, and backdooring Clouds customers only stands to hurt Cloud.