General consensus is that neither the model nor its outputs can be protected IP

You say “if”. How did Anthropic obtain this IP, if the model serves ripped internet and all human knowledge?