Apple’s AFM 3 writeup puts the real boundary in the split between on-device models and server models running under Private Cloud Compute, including AFM 3 Cloud Pro on NVIDIA GPUs in Google Cloud. Worth reading for the architecture claims, but the privacy guarantees and evaluation numbers are still mostly vendor-stated until the promised technical report lands.