I think they poison outputs now if they detect distillation attempts. So a model trained on distilled outputs will be stupider.