Yeah agreed, especially for legal and healthcare models.

[edit] I'd go one step further too and say the training data should be explicitly requestable too so third parties can verify (freedom of information act styles).

Not in the West, but they will be in China and the rest of the world.

If you are not self-hosting on your hardware inside your network, why do you care whether the model is open or not?