[nshireman]

Lightroom has a local Heal/Remove feature, and at least with LR Classic you have to tick a box for the AI remove, which processes it on Adobe servers.

As for whether it can be compromised... Probably? It sends all or some of your photo to a remove server, so that can certainly be taken.

[missing-acumen]

I mean, having the model behave this way looks too easy and I guess that adobe does qc on the features it releases, so I'm not sure to see an alternative explanation - or adobe's qc is poor/inexistent.