> stealing copyrighted data.
As ever, I'll be a pedant and point out that "stealing copyrighted data" is not a thing.
More substantively, we don't know whether training is copyright infringement or not. The courts have yet to weigh in in any jurisdiction I'm aware of (i.e. the EU or the US).