They should not have had traffic at all. The LLMs were supposed to be able to request downloads. Very simple traffic analysis could have shown that something strange was going on.

Heck, they could have had other LLMs watching the traffic if you want to be fancy about it.