If they embed a unique watermark or other steganographic identifier within model weights then they could track down the leaker.
What would it matter at that point though? You could nail the leaker to the wall and sue everyone who posts it online, but once it’s out on the internet, people will still be using it.