"On Google’s platform for example, an extraction attack would cost less than $0.10, and subvert any further model monetization"