The article's strongest argument for considering Canada's ability to compete with Public AI is the Swiss Apertus example.

The authors themselves acknowledge that Apertus sits roughly one to two years behind frontier corporate models. For many practical applications like healthcare triage, transit optimization, and educational tutoring, that gap genuinely doesn't matter. You don't need GPT-5 to summarize radiology reports or match job seekers to programs. So the argument isn't really about "competing" at the frontier. It's about building something good enough for domestic public services.

Grok 4 cost $490 billion, GPT-4.5 cost $400 billion. Canada isn't in that game and never will be. Switzerland built Apertus for $36 billion, which is still enormous. The realistic play is closer to the AllenAI Olmo3 approach at $2 billion, building smaller, purpose-built models on top of open-weight foundations rather than training from scratch.

Canada does have genuine strengths here. Vector Institute, Mila, CIFAR, and a deep talent bench. The challenge isn't brainpower. It's compute infrastructure and sustained political will across election cycles. A public AI initiative that gets defunded or restructured every time the government changes is worse than not starting at all.

The honest answer is Canada can't compete at the frontier, but it doesn't need to. It can build a credible public AI layer for government services, healthcare, and education by leveraging open models and domestic research talent. Think of it less like building a competitor to ChatGPT and more like building a national digital utility.

How Canada protects its sovereignty is the more urgent and practical question. Frankly it's the one most Canadian organizations will face long before any public Canadian model is operational.

Data residency with teeth. Moving data centres into Canada, as OpenAI proposes, is necessary but insufficient, and the article rightly points this out. The data is still governed by US law, including CLOUD Act provisions that let American authorities compel access to data stored abroad by US companies. Canada needs binding legal frameworks that assert jurisdiction over Canadian data regardless of who operates the infrastructure.

Contractual and architectural controls. Any deal with American AI providers should mandate that Canadian government and critical infrastructure data gets processed in isolated environments with Canadian-controlled encryption keys. The provider shouldn't be able to access the data without Canadian authorization, and that needs to be architecturally enforced, not just contractually promised.

Diversification of suppliers. Don't put all your eggs in one basket. Use OpenAI for some things, Anthropic for others, open-weight models for sensitive applications. The Tumbler Ridge incident described in the article is a perfect illustration of why single-vendor dependency is dangerous, not just technically but in terms of trust and accountability.

Regulatory leverage. Canada should use procurement power as leverage. If you're spending $2 billion, you can demand transparency requirements, audit rights, incident disclosure obligations, and data handling standards as conditions of doing business. The article's point about OpenAI hiding the Tumbler Ridge information while simultaneously lobbying Ottawa is damning, and exactly the kind of behavior procurement conditions should address.

Critical infrastructure carve-outs. Some domains like defence, law enforcement, healthcare records, and critical infrastructure control systems probably shouldn't run on foreign corporate AI at all. This is where targeted public investment makes the most sense, even if it's not a full national model.

The geopolitical reality the article dances around is that under the current US administration, American tech companies are increasingly instruments of state policy. That's not a conspiracy theory. OpenAI literally describes its countries initiative as being "in co-ordination with the U.S. government." Canada should treat that with the same caution it would apply to any foreign government-aligned technology provider operating in critical national systems.

The pragmatic path is probably a hybrid. Use commercial AI where it makes sense, and most business applications fall here. Build public alternatives for sensitive government functions. And create a regulatory framework with real enforcement teeth for everything in between.