safetycritiquebearishExisting defenses like local differential privacy and gradient clipping either fail against NeuroImprint attacks or impose unacceptable utility degradationComputation and Language01 Aug 2026http://arxiv.org/abs/2607.27940v1