> they can’t possibly know or find out what was in the training data

doesn’t appear to be a very strong argument