Encryption, spyware, and now Mythos: History shows why cyber export control doesn’t work

By GrowthMax Agency Published June 20, 2026 • 5 min read

Government Export Controls: A Historical Failure in the Making

The U.S. government’s decision to restrict Anthropic’s AI models, Fable and Mythos, from being exported to anyone outside the United States or to foreign nationals inside the country, is the latest example of a long-standing attempt to use export controls to contain frontier AI. However, history shows that this approach has been largely ineffective in the past. The U.S. government’s track record in controlling the proliferation of encryption and spyware is a prime example.

In the early 1990s, the U.S. government attempted to limit the distribution of encryption technologies, such as Pretty Good Privacy (PGP), by opening a criminal investigation against its creator, Phil Zimmermann, for allegedly violating arms export controls. However, this effort ultimately failed, and PGP’s source code was published as a printed book, igniting the “Crypto Wars.” The U.S. government’s attempts to control spyware exports have also been met with limited success. The Wassenaar Arrangement, an international treaty aimed at limiting the export of dual-use software and technologies, has been criticized for its weaknesses, including the lack of adherence by several countries and the discretion of countries to apply it to companies within their borders.

These historical failures suggest that government-mandated export controls are unlikely to be an effective approach to stopping malicious actors from abusing powerful dual-use cyber technologies. The complexities of the global market, the ease of information sharing, and the adaptability of malicious actors make it difficult for governments to effectively control the spread of these technologies.

Anthropic’s Dilemma: The Decision Logic and Mechanics

Anthropic’s decision to restrict access to its AI models was reportedly triggered by two events: the company’s limited partner program, which gave a South Korean telecom access to Mythos, and Amazon’s researchers finding a way around Fable 5’s safeguards. However, Anthropic disputes the “jailbreak” label, calling it a narrow, already-patched issue rather than a wholesale defeat of the model’s safety measures. The company’s decision to restrict access to its models was likely driven by the need to comply with the Commerce Department’s export control directive and to avoid any potential risks associated with the misuse of its technology.

The operational mechanics of Anthropic’s decision involve the immediate limitation of access to its products within 90 minutes of being notified by the Commerce Department. This suggests that the company has a robust system in place for managing access to its technology and for responding to regulatory requirements. However, the decision also raises questions about the effectiveness of export controls in preventing the misuse of dual-use cyber technologies.

The decision-making logic behind Anthropic’s decision is likely driven by a combination of factors, including regulatory compliance, risk management, and the need to protect its intellectual property. However, the decision also highlights the tension between the need to control the spread of dual-use cyber technologies and the need to promote innovation and collaboration in the field of AI.

Winners and Losers: The Impact of Export Controls on AI Development

The export controls imposed on Anthropic’s AI models are likely to have a significant impact on the development of AI technology, both in the United States and globally. The restrictions on access to Mythos and Fable may limit the ability of researchers and developers to collaborate on AI projects, potentially hindering the advancement of AI technology.

Companies that rely on Anthropic’s AI models, such as those in the cybersecurity and defense sectors, may also be affected by the export controls. These companies may need to seek alternative solutions or wait for the restrictions to be lifted, potentially disrupting their business operations.

On the other hand, the export controls may create opportunities for other AI companies to develop and market their own AI models, potentially creating new competition in the market. The restrictions may also drive innovation in the field of AI, as companies seek to develop new technologies that are not subject to export controls.

The Skeptical Case: Why Export Controls May Not Work

The export controls imposed on Anthropic’s AI models are unlikely to be effective in preventing the misuse of dual-use cyber technologies. The history of export controls in the field of encryption and spyware suggests that these controls are often ineffective in preventing the spread of these technologies.

Moreover, the export controls may drive the development of AI technology underground, making it more difficult to track and regulate. The restrictions may also create a black market for AI models, potentially leading to the misuse of these technologies.

The Signal to Watch Next: The Future of AI Regulation

The next verifiable event to watch in this space is the outcome of the standoff between Anthropic and the U.S. government. If the administration buckles and lifts the restriction, it may amount to tacit acknowledgment that AI labs elsewhere, including in China, will likely reach similar capabilities regardless of what the U.S. restricts.

Alternatively, American AI companies could end up needing government approval before serving foreign customers at all, a compliance burden that would invariably dent their bottom line. The outcome of this standoff will have significant implications for the future of AI regulation and the development of AI technology.

Pick one tactic from this post and apply it today. Which one will you start with?

By Daniel Cross, Digital Growth Strategist at TrendFlashy

Ready to launch your own asset?

Check out our guide on Building a Profitable Online Business.

Related Articles