> Open weights models do exist, but they require much greater investment, which many of the abusers aren't willing to make.

I think the biggest concern are state actors who have no problem spending money on some gpus. I don't think it is feasible to watermark open weights LLM outputs.