To that point, given a corpus of writing from person A and another from person B, I have no doubt it’s easy to train a classifier to determine who wrote what. In fact I believe law enforcement agencies already have these classifiers.

The only difference here is that Anthropic is actively trying to make the watermark undetectable.