This is an important directions towards detecting untrained/under trained token. They waste tokenizer capacity, can trigger harmful outputs from unexpected inputs, & may be exploited to bypass safety guardrails by pushing the model beyond its training scope.