Is it really that different than a search engine? Take away the AI specific language and you have two products that when given his username return results with his real name.
So if you try to remove the information from a neural network model then it can still have it in different forms you may not even think of, for example in language models the same thing described with different words.
And on the other hand removing one thing may affect the models performance on other unrelated things too.