If the distillation "attacks" created useful inputs to open weight models, ai-2027 was directionally correct that the Chinese would find ways to extract IP from western firms. (Scaled account creation and grinding outputs etc is not a dramatic story element as spies, though!)

Whether the distillation has constituted "attacks" or has or will meet the bar of "stealing" IP is not super interesting to me, though.