When access to advanced AI models can be restricted with the stroke of a policy update, how much control do businesses really have?