I wonder if these detections would become just impossible once NLP researchers figure out how to integrate adversarial training (specially GANs) into their models.
If you fix that with a better sampling strategy like beam search or RL finetuning, unclear how well OP-like methods would work.