US model makers can train on web data - but distilling theirs is a 'national security risk'