You're correct, but we also have model services that support the ReAct pattern which builds the exfiltration into the model service itself.