I tested a dataset of "poisoned" images for training stable diffusion and it didn't do jack shit. Still worked great. I also saw one of the authors of the paper "bragging" that the paper wasn't replicable. Doesn't exactly inspire confidence in it's work. Best thing you can do is add a watermark.