Given the emergence of low-cost, high-performance open-source LLMs from China (DeepSeek, Qwen, ChatGLM) and new regulatory frameworks like the SEC's AI Task Force, how are financial institutions balancing cost optimization with compliance requirements and data sovereignty concerns?