"Too dangerous to release" until an open-weight model replicates it two weeks later.