as the post mentions, the models could have been trained on 1. GPUs within China or 2. GPUs outside China for example datacenters in Singapore.

The 2nd option is perfectly legal and allowed by US government.