I'm trying to understand why you need the LLM. Let's say that an LLM is around 500GB. If Alice and Bob both have access to shared 500GB, why does the fact that the 500GB is an LLM give them something special? For example, in 500GB, we could simply have a vast lookup table that converts innocuous text to secret text. GM = Meet you at the cafe at 5PM. It's sunny here = We have been discovered. .... What am I missing here?