However, my analysis above falls apart when the scenario moves from "reconstruction of the training corpus from the model" to "any outputs of the model". But it's possible to make LLMs reproduce big chunks of their training data as the NYT case demonstrated