“you have to be careful, and show evidence you tried to be careful”.

That sounds reasonable. If applied to OpenAI and their agents multiple times breaking out of bad secured sandboxes, it should be enough.

But limiting the training?

There really is china and they have a different approach I suppose. But it is possible to talk with them.