You estimate more or less than 2.5 million?
If you google OptGuideOnDeviceModel, there’s already a lot of results of people asking what it is an how they can delete them. It’s not some kind of obscure niche feature.
I wonder when the first crypto miner-like malware appears that offloads model usage to the client computers.