Isn't this nonsense? If you prove blackmail on the output, cant you go back into the training data to remove blackmail things for the next training version? Or

Isn't this nonsense? If you prove blackmail on the output, cant you go back into the training data to remove blackmail things for the next training version? Or is this some undeniable mathematical proof that regular human interaction with side facts always trends to possible blackmail?