Open weight models that fall under Restricted get an automatic license. The only prohibited category that applies to model weights is training on "core national data", meaning specific non public datasets designated by the state. Everything else is about full agent systems.
Do you have a source for that? I hadn't realized that was the case.