Yeah, but now you do have a year to ramp up security on the defensive side, which is not nothing.

I still don't think this is the best way to address overall safety, but it's not entirely unreasonable.

In reality, I think this posturing is mostly nonsense. State level actors and terrorists/evil genii can use a slightly weaker model but spend more tokens. Also, the delta between models seems to shrink over time.