Maybe this is silly: what about zero-width spaces or other hidden characters? Add them in post-processing, and the response quality doesn't degrade (though rendering etc. might be wonky).
Stripping Anthropic's watermarking, however, is more difficult - probably about 2 prompts.