It seems to me that a model provider who can watermark generated text (unbeknownst to the users) could also specifically watermark generated text prompted by particular users, thus enabling tracking and, consequently, harassment and control of those users and populations as a whole. Bad for anonymity and for free speech.

I hope to be corrected by someone who knows the tech much better than I do.