Because you're thinking it should be even theoretically detectable? Afaict, not. The random token choices are still perfectly random in the paper's algo. The key insight is *normal LLM usage involves a random number stream*. To the extent that's true, these messages can't be suspicious (see what I said to @jimmysong ).
But the argument depends on that being true.
