That's violating TOS, spamming, possibly a DDOS, but the distillation in and of itself is not an attack it's just using the model.

Like the difference between scraping a site with one or two active connections vs thousands. It's not the scraping that is an attack, it is how they are going about it