It’s a pretty safe bet that every frontier lab has multiple foreign intelligence agencies running assets inside of it.
AWS and friends are very good at providing excellent enterprise grade security, but it’s literal child’s play for nation state threat actors to exfil these models.
TEMPEST / EMSEC alone is a wide open door for unclassified datacenters when the Mossad’s out to get you.