Once model weights are publicly released, anyone can download, fine-tune, and remove safety alignment measures, rendering the traditional gatekeeper model ineffective.