Of course they can. Lets assume you are using such a model in your product, this now makes tracking its output your responsibility. It is really no different from the way you would use an open source library.