I mean, if watermark works perfectly, we don’t need this. But in a world where watermarks are defeated by open weights models regularly, we need a second line of defense.