TSM uses a BYOK model for expensive or tightly rate-limited providers. News is free and open. LLMs and premium market services can be brought in by the user, or by a limited guest configuration when we intentionally choose to cache and share a provider key.
The browser vault stores keys locally by default. Google sign-in can add an explicitly chosen encrypted profile-vault recovery copy, while the terminal, brief, monitor, and analytics layers still call only the providers you select.
Questions answered here: What is free? What is BYOK? What is guest mode? Which providers are supported? The page should function like a short setup guide, not a wall of policy text.