Even if it was trained with OSS licenses, some of them require proper attribution, which copilot doesn’t do.

Now, where the threshold is for substantial derivative work in order to require attribution is an interesting question.