They could be crowdfunded. You could even have a system where only contributors to the crowdfund have a license to use it.

>How is open source going to work when governments start declaring models as munitions?

I mean open source cryptography did win that battle in the end. Even if it's illegal you could host the model weights on i2psnark and crowdfund with monero.