The UK AI Security Institute says GLM-5.2 and DeepSeek V4-Pro now trail leading closed AI models on cyber tasks by roughly four to seven months. For defenders, that shrinking gap turns open-weight model policy into an operational security issue, not a distant AI governance debate.