zdr is good, really confidential inference with attestation would be better. the same as a confidential vm TEE which confirms the integrity and privacy.

there are good providers available, i think it should become the standard.

two high quality companies: near.ai tinfoil.sh