The Clinician's Guide to Local AI: Why On-Device Models Are Quietly Winning the Privacy Argument