In fact only weights available is still better than the closed llms. We can check neurons and confirm that the model is not malicious. However we still need to develop methods to confirm the models that are being served are matching those whose weights we can observe.