There's probably some truth to it. If the Mythos model is as good as Anthropic says it is at identifying security vulnerabilities, then releasing it publicly would either result in a best case scenario of an avalanche of CVEs or, more likely, vulnerabilities being exploited quickly in the wild.