How can there be any moat for AI ever, if you can just steal a model by talking to it?

This is what I find the most fascinating about the people arguing that you can copyright-wash anything (e.g. FOSS code) by passing it through an LLM. Surely that same logic applies to the LLM itself?!