Sovereign by necessity? Frontier AI export controls, cyber security, and the limits of national AI capability