When a company distills knowledge from a competitor's AI, it's not just scraping pre-training data. It's a highly efficient process of extracting the model's intelligence, reasoning patterns, and skills. This is more akin to an apprentice directly interacting with and learning from a world-class expert than simply reading the same textbooks the expert used.

The leak revealed code designed to hide AI contributions to open source. This created significant backlash specifically because Anthropic has built its brand on safety and transparency, leading to accusations of hypocrisy and a greater breach of trust with the developer community than another company might have faced.

A key disincentive for open-sourcing frontier AI models is that the released model weights contain residual information about the training process. Competitors could potentially reverse-engineer the training data set or proprietary algorithms, eroding the creator's competitive advantage.

The leaked code revealed an "anti-distillation" feature that intentionally inserted decoy tools and masked reasoning steps into the agent's thought process. This was an active, deceptive ploy to prevent competitors and researchers from understanding how the proprietary agent harness actually worked.

The current trend toward closed, proprietary AI systems is a misguided and ultimately ineffective strategy. Ideas and talent circulate regardless of corporate walls. True, defensible innovation is fostered by openness and the rapid exchange of research, not by secrecy.

A common misconception is that Chinese AI is fully open-source. The reality is they are often "open-weight," meaning training parameters (weights) are shared, but the underlying code and proprietary datasets are not. This provides a competitive advantage by enabling adoption while maintaining some control.

The accidental leak of Anthropic's Claude Code and its rapid, widespread distribution demonstrate how software IP can be compromised globally in minutes. This incident highlights the growing challenge of protecting proprietary code in an era where it can be replicated endlessly almost instantly.

Hackers are exploiting AI models not just to write malicious code, but by circumventing safety protocols to extract sensitive or useful information embedded within the AI's training data. This represents a novel attack surface.

Despite billions in funding, large AI models face a difficult path to profitability. The immense training cost is undercut by competitors creating similar models for a fraction of the price and, more critically, the ability for others to reverse-engineer and extract the weights from existing models, eroding any competitive moat.