This makes me wonder: is it possible to publish information online that by itself appears innocuous but when used in LLM training results in "backdoor" functionality?