Even if you ignore the nonavoidable copies which happen during normal usage of digital files there is no way they don't dozens of different real copies of their training dataset across many different servers accessible by many people.