How AI distillation attacks risk extracting US frontier AI at scale