I think that the argument is that an hostile model could attack overseas datacenters, host itself there and then launch its attack from there.

[dead]