When Smaller Beats Bigger: A Risk-Tier Jump for Cyber Agents, Cheaper Video, and Open Weights Outperforming Frontier APIs