Even if it were slightly more expensive, it's still a better sales proposition for a company if they can run it from a hardware provider with their own locked down VPS and ensure that their IP is protected and that their data isn't being stolen or trained on. The fact that it's a little cheaper is icing on the cake.
Honestly, it's the only sane way for the market to move. The big labs are obviously stealing our data. Anthropic in particular clean-rooms everything you feed it, even if you opt out, so that it can train on your IP without getting sued. It's a copyright grey area they're abusing because the law has not kept up.
I mean, AWS Bedrock (with the exception of Fable) gives enterprises the same assurances (but again, with the exception of Fable, which is explicitly listed as requiring data egress [or exfil, depending on how you look at it] outside of your contractual AWS security boundary).
It gives you "assurances" that can be broken. They could still be clean-rooming your prompts like Anthropic does. The only way to be certain is if they don't have access to your data to begin with.
Honestly, it's the only sane way for the market to move. The big labs are obviously stealing our data. Anthropic in particular clean-rooms everything you feed it, even if you opt out, so that it can train on your IP without getting sued. It's a copyright grey area they're abusing because the law has not kept up.