> My 2ct: Currently the moat may be that they are not US-American which is not reproducible by any of the US alternatives.

I hope you are right (I am in the process of finalising a product and one of the top-5 selling points contains "outside the jurisdiction of the US"), but in my experience, companies only pay lip service to ethics unless it hits their bottom line.

Mistral is still hosted on US providers, their EU centers are only in planning. Data access aside, if AWS or Azure (or Cloudflare) are ordered to pull the plug, it's still goodbye Mistral. Unless you use a third party hoster that is, or do it yourself of course - already possible.

This moat doesn't seem to be much of a moat considering a non-US model doesn't even crack the top 5 by usage - except DeepSeek, which would be a strange choice for Europeans looking for data sovereignty.