Exactly. It is very difficult to implement these data poisoning attacks in the wild due to the size of internet data in general.