while I generally agree that models with this level of cyber capability should not necessarily be released to everyone on day one, if a company or developer can meet compliance requirements, they should be eligible - and eligibility should not be based on nationality.

Your point is interesting! And with a Mythos-class model already on the market (e.g. DeepSeek or GLM), will OpenAI and Anthropic be forced to apply the same policy?