> guarantees queries can only be seen by the user

The only way to "guarantee" that is to run your models locally on your own hardware.

I'm guessing we'll see a renaissance of the "desktop" and "workstation" cycle once this AI bubble pops. ("Cloud" will be the big loser.)