There must be some set of outputs that is completely resistant to watermarking. For example if I told Claude to output "Hello, World"