Anthropic's complaint about "distillation" attacks (obligatory scare quotes because training on glorified chat logs is a far cry from actually distilling from model weights you have real access to) is also about ToS violations. Anthropic's ToS, like OpenAI's, forbids you from exploiting interactions with their model for the purpose of building a competitor, even though rumor has it that the AI industry has been doing exactly this for a long time anyway.