Yeah. That could be resolved if the ML teams only had access to the aggregated, anonymized data or the output of the models. And if a privileged access token (f

Yeah. That could be resolved if the ML teams only had access to the aggregated, anonymized data or the output of the models. And if a privileged access token (for example, the one the model training flow ostensibly uses) is logged as querying specific subsets of the raw data or ferrying it out of band, that should throw an immediate alarm with an audit trail.