There's a number of gotchas with DeepSeek:
1. The T&C indicates that all output is their IPR.
2. Data goes in.. stays in and remains theirs for training etc.
3. It's been shown to generate code that has vulnerabilities (including using libraries that hackers have used their vulnerabilities)
4. It's been shown to avoid CCP sensitive issues and so there's a question mark about bias.
5. The front layers have been shown to overfit - this makes it great for specific test performance but in a longer term it's not as performant.
So nobody can use it realistically for the company..
Don't conflate the model and the API offered by the company itself (in China) - obviously they've got to comply with Chinese laws but the model is open source, you don't need to use their API when it can be self-hosted or hosted elsewhere without giving them any of your data or indeed being subjected to whatever additional censorship they may be obliged to add to their API. People absolutely can use it (and indeed are doing so).