> LLM assisted attacks solve

Yes, LLMs can easily knock over your on-prem docker appliances.

But you can still put stuff out of reach. I'm currently designing a key on-prem appliance that is can be compiled down to transistors, giving deterministic wire-speed performance while ruling out RCEs. It's cryptographically homomorphic: it processes authorized inputs but doesn't know what they mean, so an attacker who obtains the disk doesn't benefit either. The design will be highly resistant to exploits, and is likely to remain outside the "next-token" prediction training set.

This is the kind of thing AWS won't sit down and engineer for you. But thanks to LLMs I finally have the time.