It is already fairly trivial to write a universal watermark remover, an LLM can do it for you.

Without access to the code, I imagine it'd be extremely difficult even with unlimited API calls to the watermarker.