[Shemetz]

1. They don't need an enormous number of artists; the research paper showed significant results with even 50 poisoned image samples in the dataset, which is enough to be contained in even a single artist's online gallery.

2. They don't need to keep it a secret; the goal is to remove these images from the training data, in a way that would be much more efficient than simply adding a "please don't include my art in your ai scraper" message next to your pictures.