Erased but Exploitable: Black-box Embedding-Aware… · DeepSignal