You wouldn't even need to try to break it. The goal of the model is to learn patterns and pass tests against the training data. Given that these images are expe

You wouldn't even need to try to break it. The goal of the model is to learn patterns and pass tests against the training data. Given that these images are expected to ned up in training sets, then eventually whatever technique is being used here will fail to thwart the training process.