Easy to defeat, just don't include the name of the painting in the training data.

Or you can just go the way the developers of github copilot apparently went when it was caught copy pasting source code from Quake 3 verbatim. Put the words used to get the proof on an internal ban list.