Chinese open-weights AI models like GLM 5.3 and Kimi K3 refused most cyber-offense tasks on OWASP Juice Shop, matching the alignment of frontier American models. OpenAI's Sol variant demonstrated higher capability, completing 29 challenges, while abliterated open-weights models showed strange safety fixations but remained ineffective at penetration testing.