Interesting viewpoint, but what do you mean by "applying a filter"? There isn't anything inherent in this that is specifically aimed to protect copyright, so removing should not circumvent it. Removing the cloak, if necessary, is more akin to processing the input data to remove racial slurs or misspelled words to train a language model. The cloak is not meant to prevent copying. This is just an adversarial technique against specific models, which will not work in general if you get to train a different model.