Taking you to the card → The cyber-defense debate: open models vs. trusted-access programs