Any open source model worthy of the adjective isn't done[0] locally and shown only to friends, and the models are what's going to get attacked.

[0] built locally, probably, but if you stop at that point there's nothing open about it, source or otherwise.