Gemma4 is apache2 licensed.

I am unsure about the openness of the training data itself. That too should be required for a LLM to be considered 'open'.

Open source is the only way forward, I agree.