well, unlike say linux it's not just the code, but training data which of course never has been and never will be shared, and compute. So keeping the whole thing (training data, compute, and the code) private seems quite doable, even if one or two parts of this get leaked you still can't build on top of the whole thing.
I mean... like you said, the genie is already out of the bottle, I don't get it.