I wager regulatory capture lies this way. Look for this becoming an in-hardware feature, with big fat patents on it, and then a push to demand all inference providers use "TPM chipped" hardware.