watermarking will only work if it's embedded in the model (i.e. frontier/paid offerings). The rate at which open-source/open-weight models are advancing I think watermarks are probably only a temporary solution right? Fragmentation of the models available, or having more models that don't contain watermarks available will probably make this technique useless in the future I would think?