How do you prevent this from being trivially defeated by getting multiple copies of the list and intersecting them?

Keeping quiet about it. You are only hearing about it now because it is part of a court case.

Now they will need 1000 canary entries, and each list skipping just one, so abusers will miss the remaining canaries if they have just a few copies of the list.