Has Google’s AI watermarking system been reverse-engineered?