You're right. That's always the case when using someone else's computer the cloud.

Moxie addresses it in this blog post. https://confer.to/blog/2026/01/private-inference/