Whether a trained model is itself personal data is a very interesting topic, and is it really possible to keep training and still be able to delete it? That is another viable question, especially for smaller models trained on user data