realistically, there will need to be a way to distinguish AI used in critical applications (healthcare, industry) versus non-critical applications (ChatGPT, website integrations)