Always assume someone’s training on ya (maybe not to point of losing competitive advantage, but on a personal level).

Airgap your models from Country A, review outputs with model from Country B?

They’re talking about open-weight models you host yourself. Which are fundamentally incapable of spying on you unless you give them network access. We also haven’t seen any evidence of open-weight models exfiltrating data over side channels (DNS/steganography/etc) yet, so at this time internet access still seems safe enough to grant without worrying about spying.