## Lesson — Do not assume a provider is local based on its name alone

**Tags:** security, llm, networking

Do not assume a provider is local based on its name alone (e.g., Ollama), as it may be hosted as a remote service. Security exceptions for local traffic must be verified against the destination URL's hostname and IP to prevent unintended masking bypasses on remote instances.
