As I noted, Alsup draws a distinction between copying for training the model vs. copying as part of the output - and in doing so quotes Authors Guild v. Google:
> What matters in such cases is not so much “the amount and substantiality of the portion used” in making a copy, but rather the amount and substantiality of what is thereby made accessible to a public for which it may serve as a competing substitute.
That is the key point for the third factor.