“Google considers the AI model training technique of distillation to be an "attack."”