One way to achieve full defensibility could therefore be to train on a human mimic of the corpus?