They explicitly train models only on public datasets