a16z GP, Martin Casado: Anthropic vs OpenAI & Why Open Source is a National Security Risk with China

Summary

• Casado’s core call: the model question has been around for three years, and “there’s only been one sin and that one sin is zero sum thinking.” The hosting providers and model companies investors wrote off as non-defensible — alongside Nvidia — have kept growing in value, so the mistake is not playing. But he’s explicit about the paradox: the game is capital-intensive and non-leaders are already getting wiped out — “you kind of have to play, but it’s very very high risk.”
• On the vibe-coding stack’s dependence on Anthropic, he bets oligopoly over monopoly, on the cloud analog: AWS held 70–80% share early — “way more dominance than Anthropic has now” — and still ended in an oligopoly once Microsoft and Google spun their way in. Models distill easily (he cites recent launches including likely Qwen and likely Kimi), Gemini 2.5 is his personal standard model on price-performance, and Google can subsidize arbitrarily — so an independent consumption layer stays a “very healthy layer.”
• Brand effects are back for the first time since the internet: markets are expanding so fast that the household name wins the frontier by default (“My mom knows ChatGPT”), and the brand leader “tends to get 80% of the market” until growth slows and share disperses — exactly what happened to AWS. Investing implication, stated flat: “you just try to invest in the leader and it’s worth paying up for the leader.”
• “Models” are not one asset class: diffusion businesses (ElevenLabs, Midjourney, Black Forest Labs, Ideogram) have great economics because the models are smaller and Google doesn’t subsidize speech — while frontier language is a subsidized, high-stakes game where “if you’re not in one of the leaders, that capital is forfeit.” Markets also fracture as they expand: OpenAI was first to code, image, and video, lost all three, and was still rational to keep language — “by far the largest market.”
• His contrarian call on national security: “open source is most dangerous because China is better at it than we are” — the answer to Chinese model proliferation is to fund US open source, national labs, and academia “like crazy,” the same posture that worked when he simulated nuclear weapons at Livermore in 1999. The worst VC take he’s heard: “open source is bad for national security.”
• The productivity call that cuts against the hype: coding models make “10x engineers 2x,” not 100x — every company he works with uses Cursor, yet product velocity hasn’t visibly jumped because “the things that are hard remain really hard.” The average production PR is two lines, and those two lines encode field learning no model has; apps were always copyable (“it’s fucking CRUD, man”), so AI doesn’t change the defensibility paradigm.
• His one sin in investing proper: missing the winner — losing money on a dead category is forgivable, picking the wrong horse in a live one is not, because “there’s basically no amount of work you can do to determine if a space is going to work” but you can diligence which of ten companies is best. Harry’s open pushback — he’d fire the person who picked the wrong market — is left standing as a genuine philosophical split.
• Quickfire tells: most overhyped category is “ASI”; the founder he’d wire money to blind is likely Michael Truell; his most impactful trait is “deep-seated anxiety from being poor,” from food stamps on a Montana dirt road to running a16z’s $1.2B infrastructure fund while working 80–100-hour weeks.

Deep dive

Not yet available upstream; scheduled sync will retry.