“Even with a complete private sector crash course in security, China would likely still be able to steal AGI model weights if it were their top national priority.”