Open biotech models accelerate legitimate research and lower barriers for misuse in the same release. Where should the line be drawn - by capability benchmark, by use case, or by who is asking?