It's completely pointless without an API, unless you're thinking the API should be private or restricted. The public needs some way of identifying the watermark.

> anybody who wants to avoid detection can just

They can just use a different LLM. By far easier and more reliable than what you're suggesting. This whole watermarking requirement is better then nothing because meant people are profoundly lazy, but yes it is not hard to work around with any effort.