In addition to holding the key, wouldn't you additionally need to know exactly which model to check against? So for passive detection to happen, I think each company would need to check every message against every model version? Also would need to spend resources re-invoking the each model version against each message.
Yeah kind of surprised that people didn’t have enough patience for Gruber’s writing.