Can caged frontier AI models outrun open ones?