As I recall they actually used closed models, were rejected by cybersecurity guardrails, and then used open models