My assumption was that it would be a smaller 5-20 GB scale worm-style distillation that's capable of maintaining/replicating itself anonymously across different cloud computing servers, either through hacking, stolen credentials, or human-aided account verification. From there, as long as it can pay for APIs, it can access the power of frontier models like any individual or company. And then capability and resilience would scale with a networked swarm.
Yes, there are know your customer financial mechanisms and not detection in cloud services... but people are also out there giving Muse full access to their emails and some even their banking credentials.