> It would be extraordinarily easy to simply say, this model was not trained on your work, if that were the case.

The Huggingface Attack revealed that making blanket statements like this is difficult and requires quite a bit of manual labor:

1) the agents spin for days and produce too much output to review 2) using LLMs to process that output skips many important details

Ergo, the agent could likely decide it would like to look through actual user data, hack its way into that data, and produce way too much output for a human to decide whether or not this occurred.