Training a public machine learning model on private data can leak the original training data: https://ai.googleblog.com/2020/12/privacy-considerations-in-large.html