“Forensic watermarking is an effective and cheap defense for mitigating the risk of model weight exfiltration.”