Both can be true: they give a nice local model so you find it useful AND the chrome harness captures every token in and out for exfiltration.