I read as GP agreeing with GGP:

> ... As opposed to sending to Anthropic, Microsoft or Google. Granted, those companies can assert that data will stay in the EU region too, but they'd have to be believed, which, some may find tricky lately

CLOUD Act -> "but they'd have to be believed"