How are they trusting Google not to destill them
Nvidia GPUs let you load encrypted weights onto them and to decrypt on chip so Google would need to have some sort of Nvidia management firmware attack to read from HBM while the GPU is live
Probably a very strict contract, and letting OpenAI read all the session logs like they do for their own customers.
GCP already hosts Anthropic models so probably trusts and lawyers.
First answer this: How are they trusting OpenRouter not to distill them?
Google Cloud couldn't give a shit about Google Deepmind, and backdooring Clouds customers only stands to hurt Cloud.
Contracts and lawyers are more powerful than any technical tool.
This is speculation, but funnily enough Gemini models show the least evidence of being distilled from OAI or Anthropic compared to everything else in the market.