A block on exporting access to Claude Mythos 5 and Fable 5 turns a policy question into an enterprise security lesson: who controls the model can matter as much as what the model can do.