> the only real advantage for local models (privacy/secrecy) hasn't proven convincing for broader IT either
Because of nonexistent regulation. Just wait for it…
The legal situation in for example the EU is crystal clear, only that it will take some time to go though all court instances.