> models can’t phone home

Models with tool access (and internet-connected tools like curl) can, though… is this really a useful distinction?

It is. Harnesses do not need to give LLMs such broad tools like the shell.

Yes, because you can run a chinese model on a USA server. The fact that it's a chinese model means nothing.