At least at this point most people using them are using them running on western infrastructure. A backdoored llm would be an interesting thing to see. Like every time it realizes it was running in claude code it installed a backdoor or something. For now seems to be theoretical.