Comment by Drakim

It's roughly in the same spot as reliably detecting if you have permission to use the image for your data training set in the first place.

If it doesn't matter, then neither does the poisoning matter.