You're not understanding my problem. You modeled security against a certain attack by picking one particular distribution of queries and saying "we resist this

You're not understanding my problem. You modeled security against a certain attack by picking one particular distribution of queries and saying "we resist this attack this much with this query distribution". An attacker doesn't need to choose the query distribution for your result to not apply, it just needs to be any other possible distribution than the one you chose.