I think I agree with this take. Is it conceivable that a model could leak PII that is present but extremely hard to detect in the data set? For example, spread

I think I agree with this take. Is it conceivable that a model could leak PII that is present but extremely hard to detect in the data set? For example, spread out in very different documents in the corpus that aren't obviously related, but that the model would synthesize relatively easily?