Open-weight models are the equivalent of cyber nuclear weapons or gunpowder.

How difficult would it be for a random company to use the same model to find all the exploits in their own systems? In my admittably not familiar with the industry mind, when both attacker and defender have access to the same strength AI the defender would have the advantage. They can afford to spend more on defence than a single attacker can afford to spend on attack and they have inside knowledge of their systems. Understandable it would take a bit of time to patch exploits.