Right, but I think everyone knows this. It's less obvious that a "fully locally run" model could pull a stunt like this.

(Your OS, or your device firmware, or even your CPU could be doing the same thing.)