Google's AI distillation technique suddenly becomes a national security flashpoint

Distillation is not a new technique—Jeff Dean, Google's AI lead, discussed it on a podcast in February as a method for making smaller models more capable without relying on a single large model. What has changed is the scale and geopolitical stakes. The revelation that Chinese labs used distillation to rapidly develop competitive open-weight models has shifted the conversation from a technical practice to a national security and IP theft debate. Anthropic's February disclosure that Chinese companies distilled its Claude model at an "industrial scale" using 24,000 fake accounts and 16 million exchanges crystallized the concern.

The response from major tech companies signals deep disagreement over how to handle distillation. OpenAI and Anthropic have banned it in their terms of service, framing unauthorized use as IP theft. However, the tech giants' joint letter reflects a different calculus: they argue that distillation is a "widely used technique for model improvement, evolution, and validation" and that restricting it risks driving innovation overseas and stifling competition. This tension reveals a fault line in how the U.S. technology industry views its own interests—whether protection of proprietary models outweighs the competitive benefits of access to open-weight AI.

A complicating factor is that both OpenAI and Anthropic have themselves built models using content from other sources and have faced lawsuits for doing so. This historical reliance on external data weakens their argument that distillation by others constitutes unprecedented IP theft, even as government officials frame Chinese use of American model outputs as a national security threat.