The opposite of "open" isn't necessarily "closed". It could be "classified".
There was classified public key encryption before there was open public key encryption.
There was classified public key encryption before there was open public key encryption.
But in any event, I think that AGI dangers will depend strongly on how AGIs are connected to systems to gather information and how they are connected to systems to take real world actions on their own.