“The narrative that open-weight models are inherently insecure while closed-model APIs are safe has been overstated.”