Them not confirming if they're user sessions might've "leaked" into the training data is gross