A new startup sells abliterated open models that refuse nothing, and security researchers are split on the risk.