for another angle - depending on the provider, theyre going to train on these queries and responses, and i dont want folks training an Epstein LLM, or accidentally putting Epstein behaviour into LLMs

Use an abliterated LLM and you can have it act like the worst person you can imagine.

I'm also pretty sure these docs are already being used for training, whether or not Jmail / Jemini exists.