There's no need to use ablated models right now for cyber work. Several open weight models don't refuse cyber requests (DeepSeek, GLM, Kimi K3, etc). And as you said, OpenRouter has many 3rd party ZDR inference providers and several of those serve these models.
Ablated models are not any more inherently knowledgeable about "forbidden" topics, either. Since such topics are not generally trained for, you just get weird creative hallucinations.