Am I understanding it correctly. So internally if a company is using a competitor's stolen data directly, then if anyone finds out they're in legal trouble. But if they train a model and then use the model, then they're in the clear?
Yes I think there's evidence for that. Looking at recent precedents, even if the data are illegally downloaded, big tech has been getting away with using copyrighted data, for example: