Or something like leaking every non-corporate ChatGPT user's chat logs (including temporary chats) to the NY Times.
It's more efficient to have one central "verifier" for everything, but the "who watches the watchers"? question basically says: Either constrain by construction, have everyone verify (which are two sides of the same coin, btw, when looking at a "global" thing), or centralize explicitly.