What's really funny about these eggheads encoding things like watermarks in LLM output is I've never seen one of them ask, what if the LLM does this back to pass hidden messages.