 Although in the context of this research, model replication is not an attack.  The approach could be used by an attacker to replicate a proprietary model with a public API.  Use of a stolen model, as a shadow model, can be used to stage adversarial attacks including unauthorized access to sensitive information contained within the model or experiment undetected with adversarial inputs to further stage advanced prompt injections.  How to Prevent Implement strong access controls (E. G