They fight back and forth removing the watermark a few times from the dataset and then become self destructive to defend their own work

As in duck duck go removes Claude watermark..Claude freaks out and puts it back in. Then after a few more times Claude flags all inputs as "prompt injections" and begins offering self deleting code