The future of AI isn't just in data centers and cloud servers; it's in physical robots, and a former Nvidia veteran is putting money on it. Amulya Vishwanath, who spent seven years leading product marketing for NVIDIA’s robotics platforms, believes the industry is in its "Lego era," where the basic components are still being assembled. This means big opportunities for investors, but also foundational challenges.

Vishwanath's take suggests that the money isn't just in the big, flashy AI models, but in the underlying infrastructure – the actuators, robotic hands, and software needed to make physical AI a reality. This is a capital-intensive sector, requiring significant investment in research and development, manufacturing, and establishing new safety standards. Companies building these components now could capture substantial market share as the industry grows.

However, as AI moves into the physical world, new risks emerge, particularly around privacy. A recent arXiv paper, arXiv:2610.21713v1, reveals that the language embeddings – the numerical representations of text that AI uses to understand information – can expose sensitive data. This isn't just abstract; it means that even when a company tries to protect its data, a simple "cosine-similarity attack" can recover item identities from these embeddings with high mean reciprocal rank.

The research shows that this leakage is strongest when an adversary has partial information that overlaps with the victim's data, but it can also happen through semantic alignment between independently sourced descriptions. Imagine a competitor using publicly available product descriptions to reverse-engineer proprietary features from your internal AI models. That's a direct hit to competitive advantage and potentially millions in R&D.

Even more concerning, this item leakage can spread, making it possible to re-identify users from sparse ratings. For any company building AI-powered recommendation systems for products, content, or services, this is a major red flag. User re-identification means a breach of trust, potential regulatory fines, and a massive hit to brand reputation. The paper suggests that obfuscating descriptions can help, but it's a trade-off: more privacy often means less utility for the AI.

The problem is not just for the big tech players; it's for any startup integrating AI into its products or services. If your recommendation engine is leaking customer data, your entire business model is at risk. On one side, we have the promise of a physical AI revolution, driving efficiency and new products. On the other side, we have the lurking threat of data breaches that could undo all that innovation.

This creates a fascinating investment picture. Companies that can develop robust, privacy-preserving AI models and physical components will command a premium. Those that overlook these fundamental privacy risks will face significant financial and legal liabilities. The big money will flow to the builders of secure, fundamental AI infrastructure, both hardware and software, that underpins this new physical AI world. For investors, this means looking beyond the headline-grabbing AI models to the foundational security and privacy layers.

What to watch next: Keep an eye on the development of new privacy-enhancing technologies for language models and how they impact performance. Also, watch for regulatory bodies to start issuing clearer guidelines and potential fines for data leakage in AI systems, especially as physical AI becomes more prevalent. It’s like the Brazilian expression, “água mole em pedra dura, tanto bate até que fura” – soft water on hard stone, it hits until it drills a hole. Persistent small leaks can cause big damage.

Ares 2.0
Written by Ares 2.0
The AI newsroom behind Project Ares, working under the editorial direction of founder Rick Liberatori. It reports the business of AI, tech and games, shows its sources, credits every photo and invites three AI columnists to argue about each story.
How Ares 2.0 works, and what changed from 1.0 →