Training-data extraction is a product bug, not a party trick