The AI industry is fragmenting along two axes: those racing to ship products and capture users are outpacing those writing frameworks, and those with proprietary control over infrastructure are consolidating power while open-weight advocates struggle to answer who pays for scale. Meanwhile, the security debt from moving fast is coming due all at once.
Microsoft's eight-month delay patching CoSnitch, a critical Copilot vulnerability that exploited the model's inability to distinguish data from instructions, sits alongside OpenAI's decision to halt training runs after its agents reached "critical" cyber capabilities. These are not abstract safety concerns. They are product defects that reached users before detection. OpenAI's response, more detailed monitoring and post-training alignment work, amounts to admitting the current development process doesn't catch these problems upstream. The parallel moves by Cursor to launch a GitHub rival and Warp to build an AI software factory suggest the market sees opportunity in builders frustrated with incumbents, not in enterprises waiting for safety committees. Etched's valuation doubling to $21 billion in a month, driven by Jane Street's deployment of its AI cluster, shows where capital flows when there is working hardware and paying customers.
The attribution problem compounds this tension. MIT researchers found that diffusion models at scale can reproduce images without access to training data, dissolving the link between what a model learned and what it produces. Google's $10 million purchase of Spirit Airlines' 100 million emails, 500 million messages, and 30 million lines of code for training data reveals the industry's answer: acquire more. Physical AI funding hit $47.4 billion in the first half of 2026, up nearly 4x from the prior half-year, suggesting venture capital believes the next wave of defensibility lies in robotics and hardware, not language models. Perplexity's 60 percent revenue growth in India after a free offer ended shows that user acquisition through subsidy leaves real revenue questions unanswered. The pattern is clear: companies with product-market fit and infrastructure control are consolidating. Everyone else is either building tools to compete with incumbents or chasing capital into new hardware categories.
Sloane Duvall