OpenRouter's ToS also seems to allow them to store your submitted prompts anyway, so privacy advocates would have to look elsewhere anyway, that's at least how I understand it (and it surprised me).

Why risk it either way if they provide weights for others to run this?

Am I being overly cautious not wanting to send my data to Chinese companies?

My gut feeling is that Moonshot are probably ZDR but their terms are excessively permissive.

That said, I wouldn't rule out OpenRouter misclassifying - I've seen some providers where I'm fairly sure they have.