OpenAI and Anthropic can slow their frontier work if they want to. They claim their frontier models are being distilled and jailbroken, so their own work is contributing to adversaries.
I found this relevant in yesterday’s ML4 announcement:
> This is particularly important in cybersecurity, where provider-level refusals can block legitimate vulnerability research and incident response, and where losing access to a capability mid-incident can itself become a critical security risk. ML4 pairs top-tier cyber performance with open weights and self-deployment, giving organizations both the capability and the autonomy to run advanced security work under their own policies.