> if Anthropic models run in a Google cage, does that not also mean Google can distill Anthropic models even easier (both fast and unseen)?

Not really in the interest of the cloud org to allow that, they don't really care how well deepmind is doing as long as they can sell TPU and API (incl. reselling openai and anthropic).