All existing distillation-attack defenses are claimed to be evaluated after distillation · Digg