They only kinda work but more importantly they need mass adoption to actually poison training data. Most people aren't going to add another step to their posts so probably the only way to mass adopt it is to have platforms automatically poison uploaded images. I wonder if reposts on a platform like that would start to have noticable artifacts in the images like jpeg but different