Small open-weight AI models should be restricted because they could self-replicate