@BleepingComputer many people also published "just" their trained model on huggingface and alike - not knowing that you can easily recover training data (often confidential) from any ML model by just asking it a few prediction and by looking at the input/output layer mapping of a neural network (some of them make it even extra easy by using Python pickle - in those cases the training data including the pipeline can be simply unpickled)