Which is pointless in targeted models like I'm talking about. If I train a model that is *only* trying to detect e.g. stable-diffusion-2-1, training an adversar

Which is pointless in targeted models like I'm talking about. If I train a model that is *only* trying to detect e.g. stable-diffusion-2-1, training an adversarial model is pointless, because then you're just using a different model anyways. You would be spending a lot of training time when you could just use another already-extant model. State actors, for example, don't need to use public models for their generators anyways, so it's not like non-state actors would have true-positive images to train models on to counter said actors' models.