Detect malicious queries.Instead of preventing any queries that might leak model weights, an alternate strategy could be to implement standard anti-abuse tools to _detect_ any patterns of malicious behavior. Several proposals of this form exist for prior machine learning attacks, including model stealing (Juuti et al., 2019; Pal et al., 2021) and adversarial examples (Chen et al., 2020).