Eh, all we need is two people to send me the same leak. From there I can detect what their watermark is, develop a simple app to remove it, then give that app only to trusted folks. Easy for any semi competent software engineer.
As I typed this i realized Claude could probably figure out the watermark and write a utility to extra it with just a single leak