They can’t easily detect garbage; they can easily detect things that are outside the dataset (for some value of such).

Which means that real “new” things and random garbage could look quite similar.