If it’s not Confidential AI, it’s not really private.