Models can unpredictably memorize sensitive input data, so there can be a real copyright issue here, I think.

https://arxiv.org/abs/1802.08232

Worse, sometimes the input data is illegal to distribute for other reasons than copyright.