@aeva Oof... So not only is it easy to poison the training data, it's also rather trivial to reverse engineer it. Yikes.