If they are an adversary, then you could inject broken information for them to distil with. Then have an alternative, private model for government and military purposes that doesn't have the broken information.