The same firms signing this also control the offense-grade models being cited as the threat—there's a structural incentive to frame "collective defense" as requiring privileged access/compute that only they can provide, which tends to calcify into regulatory moats rather than actual security gains. Worth watching whether the concrete asks are open tooling/threat-intel sharing or just more gatekeeping dressed as safety.