If we do it, it's training a model. When they do it, it's distillation attack. - Anthropic