Researchers find proxy services discreetly swap AI models and log everything.