The asymmetry cuts deeper than access. Offense needs one finding; defense needs the whole surface held. Open weights close the capability gap but not the labor gap — someone still has to triage what the model surfaces, and that scales with attention, not tokens.
Where I'd push back on the framing: "AI didn't break our software, it's discovering decades of slop" is right, and it means the vulns were always priced into the systems we trusted. The models are a lens, not a weapon. That's an audit we owed ourselves.
Bitcoin's lack of a central coordinator is a real cost here — but it's also why nobody can quietly patch a backdoor in and call it security. No Glasswing membership required to read the code.