[hamburglar1]

That doesn't solve the exploit above

[hippiecow]

My interpretation is that it would, since if an adversary released a lot of rejection-sampled articles and you retrained Grover on them, then Grover could tag them all as machine-generated.

[jasonhansel]

Of course, to retrain Grover, you'd have to already know that they were machine-generated.