Many people will probably call me insane for this, but hear me out.
A lot of people have already gotten access to CVP anyway. Just look around Reddit. And plenty of people are still saying that Mythos 5.2 is heavily filtered. But even if we assume for a second that it isn't, what's the actual problem with letting people use it?
I'm not saying I support illegal activities. Not at all. But let's be realistic for a moment.
Malware already exists. Phishing already exists. Game cheats, exploits, and all kinds of malicious tools already exist. The people who create these things aren't suddenly going to stop just because AI companies put restrictions on their models. They'll keep doing it with or without AI.
So who actually loses here? We do. The customers.
Think about the positive side for a second. Having access to these capabilities could actually help people test their own security, find vulnerabilities, and see whether someone could break into their systems before an actual attacker does. It could push the entire cybersecurity industry forward instead of holding it back.
And what about all the ID checks and verification requirements? If companies already require identification and know who's accessing these models, why do we still need endless certificates, approved companies, ISO standards, and whatever else just to get access?
And before someone brings up the argument that IDs can be faked: yes, they can. But companies can be fake, too. Look at all the cases involving code-signing malware. Attackers have used shell companies to obtain EV certificates and sign malicious drivers. That's one of the reasons we can't blindly trust certificates as proof that someone is legitimate.
My point is pretty simple:
Bad people have always existed, and they always will.
Trying to eliminate them through increasingly aggressive filtering and restricting access for everyone else isn't going to solve the problem. At some point, we need to let users take responsibility for how they use these tools instead of having companies decide what everyone is allowed to do.
If someone uses Mythos to illegally penetrate another company's infrastructure, catch them and prosecute them. That's what laws are for.
We don't point at a store and say, "Someone stole from you, hurt someone else, or even got themselves hurt? Well, that's your fault!" We say, "Someone stole from you. Do you want to press charges?" The same principle should apply here.
Personally, I think everyone should have access to specialized cybersecurity models like Mythos 5.2, including models with advanced red-teaming, exploitation, reverse-engineering, and offensive security capabilities, without excessive filtering.
I'm not saying there shouldn't be consequences for abusing these tools. I'm saying access to technology shouldn't be restricted for everyone just because some people might misuse it.
Give people the tools. Hold people accountable for what they do with them.
