"Distillation attack" feels like a loaded term for what is essentially the same kind of scraping these models are built on in the first place.