Comment by glub

Yeah, for web apps, you can trick models by simply proxying it and pointing the models to that localhost. They then think they're not working on a live target.

Have personally tested this with Opus and Sol and it works.

Classifiers are tricky though. Here's where open weights will win.