Glaze techniques might be specific to a model but the techniques to defeat it are not. More specifically, I don’t see any reason to believe that I cannot learn

Glaze techniques might be specific to a model but the techniques to defeat it are not. More specifically, I don’t see any reason to believe that I cannot learn a function from A to B where A is the distribution of watermarked files and B is the distribution of non-watermarked files. It’s a trivial exploit.