I think that's consistent of Anthropic.

The whole point of Mythos/Glasswing is "our models are scary good at security research, so much so that we won't let them help you find vulnerabilities unless you are a trusted partner".

You can just fill out a form and be in their security researcher program, which dials back the refusals.