“Traditional security providers that inspect traffic at upstream cloud pinch points often must resort to blocking personal AI services entirely, as they cannot effectively distinguish between personal and corporate tenants.”