That is a concerning possibility but I wonder what the threat model is.
They have all that information already and could simply classify and pass it on without the need to encode it with a probability.
They have all that information already and could simply classify and pass it on without the need to encode it with a probability.
Your signature from the safe material is now associated with your content on the dangerous part, and then the brownshirts come knocking on your door.