Although that feels like an overly simplistic example to the point of not being not being a helpful example, I agree that the amount of tokens to encode the watermark is so low in text, that it wouldn't take much to erase or distort it.