Some people have access to the model for red team purposes as part of Glasswing and they came away quite spooked according to what I heard

I don't doubt it, I just mean the decision to release/not release generally may also be informed by the commercial/economic viability of the model for general usage patterns versus extremely high value patterns like vulnerability assessment