The training data is the source. If the training data is not open, the model is not open source, because the source of the model is not open. See this previous comment of mine that explains this: https://news.ycombinator.com/item?id=40035688