Shouldn't one of the main properties of data poisoning be that it should go undetected? otherwise the collector agency (FB, whatever) can just develop an algori

Shouldn't one of the main properties of data poisoning be that it should go undetected? otherwise the collector agency (FB, whatever) can just develop an algorithm to flag that new data.