It depends how secure they are. But yes - in reality they are only a couple of TB, so just distributing the models and their source code (not their training data) it feasible.
I mean, the source for claude code was "leaked" by accident so at least some of their processes are not that secure. I feel that they are more like a Startup then a Enterprise (ignoring finances).