This is why I laugh when the companies cry about model distillation "attacks".