truthfultemporarily

I think they want to detect others distilling their models.

Another case of: use an American router against the Chinese backdoor behind a Chinese router against the American backdoor.

(Or just do open source)